CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...

CVE-1999-1157

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...

CVE-1999-1452

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-1999-1359

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

camshot.overflow.txt

---------- Forwarded message ---------- From: "Ussr Labs" To: "TECHNOTRONIC" Subject: Local / Remote GET Buffer Overflow Vulnerability in CamShot WebC= am HTTP Server v2.5 for Win9x/NT Date: Thu, 30 Dec 1999 14:04:14 -0300 Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP...

McAfee 4.0 / Network Associates for Windows NT 4.0.2/4.0.3 a / Norton AntiVirus 2000 - Recycle Bin Exclusion

McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source: https://www.securityfocus.com/bid/956/info Many commercial virus scanners for Windows platforms exclude the Recycled folder on the hard drive...

dns-pro.dos.txt

Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability USSR Advisory Code: 22 Release Date: December 21, 1999 Systems Affected: DNS PRO v5.7 and possibly others. About The Software: The first DNS Server for Windows NT - Database engine five time faster. - Tabs now work in the...

bindview.syskey.txt

BindView Security Advisory -------- Windows NT's SYSKEY feature Issue date: December 16, 1999 Contact: Todd Sabin Topic: Vulnerability in Windows NT's SYSKEY encryption Overview: SYSKEY does not fully protect the SAM from off-line attacks. Specifically, dictionary and brute-force password crackin...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords...

CVE-1999-0995

Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...

Microsoft Windows 95/98/NT 4.0 - Help File Backdoor

source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...

nt.ie5.scheduler.txt

Subject: Windows NT Task Scheduler vulnerability allows user to administrator elevation Date: Thu Dec 02 1999 00:00:50 Author: Arne Vidstrom Hi all, We've found a vulnerability that the installation of Internet Explorer 5 introduces in Windows NT through the Task Scheduler service. This...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...

CVE-1999-0839

Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled...

netbeans.java.txt

Reply-To: Halcyon Skinner Vulnerable Application: Sun Microsystems NetBeans recently renamed to Forte' Java IDE Versions tested: Netbeans Developer 3.0 Beta Forte Community Edition 1.0 Beta unknown if earlier versions have vulnerability Platform tested: Windows NT 4.0 unknown if other platforms...

CVE-1999-0987

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name...

Microsoft Windows 95/98/Enterprise Server 4/NT Server 4/Terminal Server 4/Workstation 4 - Riched Buffer Overflow

Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Workstation 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a Riched Buffer Overflow Vulnerability source:...

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which...