CVE-1999-1387

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...

CVE-1999-1291

The CVE-1999-1291 entry concerns the TCP/IP stack in Microsoft Windows 95 and Windows NT 4.0 (potentially others). The vulnerability allows an remote attacker to reset a target’s TCP connections by forcing a reset (RST) in a crafted packet flow (e.g., via a PSH ACK or similar), using the resultin...

CVE-1999-1463

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

CVE-1999-1364

Windows NT 4.0 allows local users to cause a denial of service crash via an illegal kernel mode address to the functions 1 GetThreadContext or 2 SetThreadContext...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

CVE-1999-1364

Windows NT 4.0 is affected. Local users can crash the system by supplying an illegal kernel mode address to GetThreadContext or SetThreadContext, causing a denial of service. The description does not provide patches or mitigations; no additional exploit details are given.

CVE-1999-1234

The CVE concerns LSA/LSASS.EXE on Windows NT 4.0. A NULL policy handle allows remote attackers to cause a denial of service via three specific Samr calls: SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo. The affected component is the Local Security Authority (LSA) within LSASS; root ...

CVE-1999-1387

The CVE describes a remote denial-of-service in Windows NT 4.0 SP2 caused by malformed SMB inputs/packets (e.g., a Linux smbmount-generated packet) that can crash the system when executed on an older kernel. Affected software: Windows NT 4.0 SP2. Root cause: improper handling of crafted inputs le...

RPC DoS против MS Exchange/SQL/Windows NT/2000

Некорректный RPCзапрос приводит к краху сервисов...

Security Bulletin MS01-048

---------------------------------------------------------------------- Title: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail Date: 10 September 2001 Software: Microsoftr Windows NTr 4.0 Impact: Denial of service Bulletin: MS01-048 Microsoft encourages customers to review...

CVE-2000-1200

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users...

CVE-2001-1452

By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...

CVE-2001-0687

The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...

CVE-2001-0509

CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0687

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...

DoS против NNTP в Windows NT/2000

Утечка памяти при постинге сообщения...

Security Bulletin MS01-043

---------------------------------------------------------------------- Title: NNTP Service in Windows NT 4.0 and Windows 2000 Contains Memory Leak Date: 14 August 2001 Software: Windows NT 4.0, Windows 2000 Impact: Denial of service Bulletin: MS01-043 Microsoft encourages customers to review the...

MS Windows NT Terminal Server 4.0 buffer overflow in regapi.dll allows remote code execution or DoS

Overview Microsoft Windows NT 4.0 Terminal Server contains a buffer overflow that could allow an intruder to execute arbitrary code with the privileges of an administrator. Description There is a buffer overflow in the code that processes the username specifically in RegAPI.DLL in Microsoft Windo...