CVE-1999-0228

Denial of service in RPCSS.EXE program RPC Locator in Windows NT...

CVE-1999-0153

CVE-1999-0153 corresponds to a Windows 95/NT vulnerability (WinNuke) where sending a NetBIOS OOB data packet to the affected host can cause a denial of service. The vulnerability is described across multiple sources (CVE records, Red Hat advisory, NVD/Nessus notes) as an out-of-band data DoS cond...

Microsoft Internet Explorer 4 (Windows 95NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4 Windows 95NT 4.0 - Setupctl ActiveX Control Buffer Overflow Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX...

Microsoft Internet Explorer 4 (Windows 95/NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's Internet Explorer. This ActiveX...

MDAC 2.1.2.4202.3 Microsoft Windows NT 4.0SP1-6 JETODBC Patch RDS Fix - Registry Key

MDAC 2.1.2.4202.3 Microsoft Windows NT 4.0SP1-6 JETODBC Patch RDS Fix - Registry Key MDAC 2.1.2.4202.3 GA,Microsoft Windows NT 4.0/alpha/SP1/SP1 alpha/SP2/SP2 alpha/SP3/SP3 alpha/SP4/SP4 alpha/SP5/SP5 alpha/SP6/SP6 alpha JET/ODBC Patch and RDS Fix Registry Key Vulnerabilities source:...

windows_phonedialer_bof.txt

Subject: Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code To: [email protected] Microsoft's Phone Dialer on Windows NT 4 all service packs contains a buffer overrun vulnerability that allows an attacker to run arbitary code in another user's...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

dcom_exploit.txt

Subject: Exploiting DCOM to gain Administrative rights on Windows NT 4 To: [email protected] By using a combination of problems it is a relatively easy matter for a local user to gain administrative rights on a Windows NT 4 Server or Workstation, though this situation is easily rectifiabl...

MS_security_bulletin.txt

Subject: Microsoft Security Bulletin MS99-034 To: [email protected] The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-034...

smtp_bof.txt

Subject: SECURITY TenFour TFS SMTP 3.2 Buffer Overflow To: [email protected] INTRINsec Security Advisory Release Date : August 30, 1999 Software : TenFour TFS SMTP 3.2 Operating System: Windows NT 3.x / 4.x Impact : The attackers can use a misconfigured TFS SMTP for spamming and can...

CVE-1999-0886

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5 - RASMAN Privilege Escalation

source: https://www.securityfocus.com/bid/645/info Any authenticated NT user ie domain user can modify the pathname for the RASMAN binary in the Registry. The next time the RAS Service is started, the trojan service referenced by the RASMAN pathname will be executed with system privileges. This...

BindView HackerShield 1.01.1 - HackerShield AgentAdmin Password

BindView HackerShield 1.01.1 - HackerShield AgentAdmin Password source: https://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group ...

BindView HackerShield 1.0/1.1 - HackerShield AgentAdmin Password

source: https://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group on an NT host. The service account password is not machine...

Microsoft Windows NT 4.0 - DCOM Server

Microsoft Windows NT 4.0 - DCOM Server source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registr...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

Microsoft Windows NT WINS Service Malformed Data DoS

We could crash the remote WINS server by sending it a lot of UDP packets containing random data. If you do not use WINS, then deactivate this server. An attacker may use this flaw to bring down your NT network. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10315;...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

IBM GINA for NT 1.0 - Local Privilege Escalation

IBM GINA for NT 1.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under...

IBM GINA for NT 1.0 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under HKLM\System\CurrentControlSet\Services\IBMNeTNT may all...