3142 matches found
CVE-1999-1289
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g., via NAT), potentially exposing sensitive information about the client or internal network configuration. The description does not specify affected vers...
CVE-1999-1364
Windows NT 4.0 allows local users to cause a denial of service crash via an illegal kernel mode address to the functions 1 GetThreadContext or 2 SetThreadContext...
CVE-1999-1049
ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...
CVE-1999-1364
Windows NT 4.0 is affected. Local users can crash the system by supplying an illegal kernel mode address to GetThreadContext or SetThreadContext, causing a denial of service. The description does not provide patches or mitigations; no additional exploit details are given.
CVE-1999-1463
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...
CVE-1999-1234
LSA LSASS.EXE in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to 1 SamrOpenDomain, 2 SamrEnumDomainUsers, and 3 SamrQueryDomainInfo...
CVE-1999-1361
Windows NT 3.51 and 4.0 running WINS are affected by CVE-1999-1361, where a remote attacker can cause a denial of service by sending a flood of malformed packets. The issue may exhaust resources, degrade performance, and fill event logs with errors. The available sources describe the vulnerabilit...
CVE-1999-1195
CVE-1999-1195 affects NAI VirusScan NT 4.0.2, where updating the virus-definition file (scan.dat) via FTP does not properly modify the file, yet the update is reported as successful. The consequence is that a system administrator could believe the definitions have been updated correctly when they...
CVE-1999-1234
The CVE concerns LSA/LSASS.EXE on Windows NT 4.0. A NULL policy handle allows remote attackers to cause a denial of service via three specific Samr calls: SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo. The affected component is the Local Security Authority (LSA) within LSASS; root ...
RPC DoS против MS Exchange/SQL/Windows NT/2000
Некорректный RPCзапрос приводит к краху сервисов...
Security Bulletin MS01-048
---------------------------------------------------------------------- Title: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail Date: 10 September 2001 Software: Microsoftr Windows NTr 4.0 Impact: Denial of service Bulletin: MS01-048 Microsoft encourages customers to review...
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses...
CVE-2000-1200
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users...
CVE-2001-0687
The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...
CVE-2001-0509
Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...
CVE-2001-0509
CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...
CVE-2001-0687
Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. dot dot in the server request...
ACI 4D WebServer Directory traversal.
vendor: http://www.4d.com/ current version: 6.7 tested version: 6.57 , others? This directory transversal hole seems to work on ACI 4d webserver running on the NT platform. I would imagine exploitation on a macos box would be similar but would require the proper mac filesystem path to the file yo...