3801 matches found
CVE-2002-2401
NT Virtual DOS Machine NTVDM.EXE in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs...
CVE-2002-2028
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...
CVE-2001-1573
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter...
CVE-2000-1227
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...
CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value...
CVE-1999-0249
Windows NT RSHSVC program allows remote users to execute arbitrary commands...
CVE-1999-0496
A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin...
CVE-1999-0560
A system-critical Windows NT file or directory has inappropriate permissions...
CVE-1999-0570
Windows NT is not using a password filter utility, e.g. PASSFILT.DLL...
CVE-1999-0344
NT users can gain debug-level access on a system process using the Sechole exploit...
CVE-1999-0723
The Windows NT Client Server Runtime Subsystem CSRSS can be subjected to a denial of service when all worker threads are waiting for user input...
CVE-1999-0654
The OS/2 or POSIX subsystem in NT is enabled...
CVE-1999-0726
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header...
CVE-1999-0596
A Windows NT log file has an inappropriate maximum size or retention period...
CVE-1999-0591
An event log in Windows NT has inappropriate access permissions...
CVE-1999-0582
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc...
CVE-1999-0595
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded...
CVE-1999-0577
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories...