Microsoft Windows NT 4.0 SP4 - Known DLL Cache

source: https://www.securityfocus.com/bid/234/info The names and mappings of kernel objects in NT are cached in the "object namespace". In this area, DLL mappings are kept in a section called KnownDlls. By manipulating the namespace, it is possible to redirect calls to arbitrary dlls...

SmartMax MailMax 1.0 - SMTP Buffer Overflow

// source: https://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary commands with the privileges of the SMTP process...

CVE-1999-0366

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value...

CVE-1999-0119

Windows NT 4.0 beta allows users to read and delete shares...

PT-1999-1005 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 beta Description: The issue allows users to read and delete shares. Recommendations: For Windows NT version 4.0 beta, at the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP4 - Server Operator to Administrator Privilege Escalation: System Key

Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP4 - Server Operator to Administrator Privilege Escalation: System Key // source: https://www.securityfocus.com/bid/182/info The default ACL over the HKEYLocalMachine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon key "System" value include...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4 - Server Operator to Administrator Privilege Escalation: System Key

// source: https://www.securityfocus.com/bid/182/info The default ACL over the HKEYLocalMachine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon key "System" value includes an entry for Server Operators:Special. The Special setting allows Server Ops to "Set" this value. A malicious System...

CVE-1999-0226

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...

CVE-1999-0611

A system-critical Windows NT registry key has an inappropriate value...

CVE-1999-0285

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection...

CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys...

CVE-1999-0549

Windows NT automatically logs in an administrator upon rebooting...

CVE-1999-0578

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys...

CVE-1999-0200

Windows NT FTP server WFTP with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password...

CVE-1999-0581

The HKEYCLASSESROOT key in a Windows NT system has inappropriate, system-critical permissions...

CVE-1999-0580

The HKEYLOCALMACHINE key in a Windows NT system has inappropriate, system-critical permissions...

CVE-1999-0596

A Windows NT log file has an inappropriate maximum size or retention period...

CVE-1999-0591

An event log in Windows NT has inappropriate access permissions...

CVE-1999-0592

The Logon box of a Windows NT system displays the name of the last user who logged in...

CVE-1999-0597

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire...