1483 matches found
CVE-1999-1222
CVE-1999-1222 affects Netbt.sys on Windows NT 4.0. A remote DNS server can cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS hostname lookup. Impact: availability degradation/partial DoS as described; exploitation details are not provided in the supplied documents...
CVE-1999-0815
Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...
CVE-1999-1157
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...
CVE-1999-1452
CVE-1999-1452 concerns GINA in Windows NT 4.0 where an attacker with physical access can cause the user’s locked workstation clipboard to be partially exposed by pasting into the username prompt. The description states the effect but does not provide root-cause details, affected components beyond...
CVE-1999-1476
The CVE-1999-1476 entry describes a local-denial-of-service condition in Intel Pentium processors (MMX and Overdrive) caused by an invalid instruction, labeled the “Invalid Operand with Locked CMPXCHG8B Instruction.” Affects Intel-based operating systems such as Windows NT and Windows 95; impact ...
CVE-2001-0663
The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...
CVE-2001-0662
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service loss of RPC services via a malformed request...
CVE-1999-1363
Windows NT 3.51 and 4.0 allow local users to cause a denial of service crash by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool...
CVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...
CVE-1999-1222
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service crash by returning 0.0.0.0 as the IP address for a DNS host name lookup...
CVE-2001-0543
Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...
CVE-1999-1316
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...
CVE-2001-0543
The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...
CVE-1999-1127
CVE-1999-1127 affects Windows NT 4.0. The vulnerability stems from improper handling of invalid named pipe RPC connections, leading to resource exhaustion and a denial of service when a remote attacker establishes a sequence of connections sending malformed data. The issue is tied to the shutdown...
CVE-1999-1317
CVE-1999-1317: A local privilege-escalation vulnerability affecting Windows NT 4.0 SP4 and earlier. The flaw arises from allowing modification of the symbolic link table in the ?? object folder by varying case letters to point to a different device, enabling local users to gain privileges. The co...
CVE-1999-1358
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...
CVE-2000-1200
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users...
CVE-1999-1359
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...
CVE-1999-1132
Windows NT 4.0 allows remote attackers to cause a denial of service crash via extra source routing data such as 1 a Routing Information Field RIF field with a hop count greater than 7, or 2 a list containing duplicate Token Ring IDs...