CVE-1999-0380

CVE-1999-0380 affects SLMail 3.1 and 3.2. When Remote Administration Service (RAS) is enabled, an attacker can point a user’s Finger File to a target file and, after running finger, access NTFS files locally. The underlying cause is the Finger service handling a user file reference insecurely, en...

CVE-2001-0045

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities...

CVE-2001-0045

CVE-2001-0045 affects Windows NT 4.0: the default permissions on the Registry key HKLM\Software\Microsoft\Windows\RAS (RAS Administration) let local users modify the value to point to a malicious DLL, enabling local privilege escalation. The issue is a “Registry Permissions” weakness leading to a...

CVE-1999-0140

Denial of service in RAS/PPTP on NT systems...

CVE-1999-0140

CVE-1999-0140 corresponds to a denial of service in RAS/PPTP on NT systems. The connected security entries indicate a remote DoS vector exploiting PPTP control traffic: an attacker can crash the PPTP server by connecting to TCP/1723 and sending malformed data (garbage) followed by a Ctrl-D. This ...

CVE-1999-0715

CVE-1999-0715 is a buffer-overflow vulnerability in the Microsoft Windows Remote Access Service (RAS) API/Client that can allow a local attacker to execute arbitrary code with LocalSystem privileges by creating a crafted RAS phonebook entry. Microsoft MS99-016 provides a patch to address the issu...

CVE-1999-0755

CVE-1999-0755 affects Windows NT RRAS and RAS clients, where a user's password can be cached even if the user did not choose "Save password." The connected Red Hat, CVE, NVD, and CVE List entries describe the same issue but do not provide deeper root-cause details, exploit status, or remediation/...

nt.ras.bof.txt

Date: Wed, 19 May 1999 11:37:00 +0100 From: Mnemonix To: [email protected] Subject: Buffer Overruns in RAS allows execution of arbitary code as system Introduction Microsoft's RAS Service on Windows NT all service packs contains numerous buffer overruns that allow execution of arbritary code...

nt4+sp4+ras.pptp.DoS.txt

Possible DOS in WinNT RAS PPTP Simon Helson [email protected] Tue, 27 Apr 1999 09:29:06 -0700 Please excuse if this has been posted before, I did a quick search of the archives and found nothing This hasn't been sent to MS, as I don't know an email address to send it to, Aleph, if you find it...

nt.ras.rras.password.txt

Date: Thu, 27 May 1999 17:18:25 -0400 From: Russ To: [email protected] Subject: Alert: Microsoft Security Bulletin MS99-017 - RAS & RRAS Passwords On March 20th, Dieter Goepferich [email protected] discovered a vulnerability involving both RAS and RRAS. This was...

CVE-1999-0140

Denial of service in RAS/PPTP on NT systems...

CVE-1999-0755

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Phonebook Buffer Overflow

// source: https://www.securityfocus.com/bid/266/info Microsoft Windows NT RAS Service contains multiple buffer overflows that allow the execution of arbitrary code resulting in elevated privileges by local users. The RAS Service allows users to dial and connect to RAS servers, or other dial-up...

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Phonebook Buffer Overflow

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Phonebook Buffer Overflow // source: https://www.securityfocus.com/bid/266/info Microsoft Windows NT RAS Service contains multiple buffer overflows that allow the execution of arbitrary code resulting in elevated privileges by loca...

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Dial-up Networking Save Password

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Dial-up Networking Save Password source: https://www.securityfocus.com/bid/232/info Windows NT allows users to save their RAS and/or RRAS credentials by using the 'Save Password' checkbox when making a dial-up connection. Credentia...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Dial-up Networking Save Password

source: https://www.securityfocus.com/bid/232/info Windows NT allows users to save their RAS and/or RRAS credentials by using the 'Save Password' checkbox when making a dial-up connection. Credentials saved in this manner are stored in the...