CVE-1999-0153

CVE-1999-0153 corresponds to a Windows 95/NT vulnerability (WinNuke) where sending a NetBIOS OOB data packet to the affected host can cause a denial of service. The vulnerability is described across multiple sources (CVE records, Red Hat advisory, NVD/Nessus notes) as an out-of-band data DoS cond...

CVE-1999-0366

CVE-1999-0366 concerns Windows NT 4.0 SP4. Affected component: network shares authentication; root cause: null NT hash value enables access with a blank password. Impact stated as PARTIAL confidentiality, integrity, and availability. Exploitation details are not provided in the connected document...

CVE-1999-0228

CVE-1999-0228 describes a denial-of-service issue in RPCSS.EXE (RPC Locator) on Windows NT. The provided documents confirm the vulnerable component but do not reveal concrete root-cause details, affected versions beyond Windows NT in general, exploitable conditions, or any remediation/patch infor...

CVE-1999-0227

Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...

CVE-1999-0376

CVE-1999-0376 involves a local privilege-escalation in Windows NT where an attacker can obtain administrator privileges by modifying the KnownDLLs list to reference malicious programs. The linked sources (Red Hat, NVD, CVE list) all describe the same vulnerability: local user access can be abused...

Microsoft Internet Explorer 4 (Windows 95/NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's Internet Explorer. This ActiveX...

Microsoft Internet Explorer 4 (Windows 95NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4 Windows 95NT 4.0 - Setupctl ActiveX Control Buffer Overflow Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX...

windows_phonedialer_bof.txt

Subject: Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code To: [email protected] Microsoft's Phone Dialer on Windows NT 4 all service packs contains a buffer overrun vulnerability that allows an attacker to run arbitary code in another user's...

MDAC 2.1.2.4202.3 Microsoft Windows NT 4.0SP1-6 JETODBC Patch RDS Fix - Registry Key

MDAC 2.1.2.4202.3 Microsoft Windows NT 4.0SP1-6 JETODBC Patch RDS Fix - Registry Key MDAC 2.1.2.4202.3 GA,Microsoft Windows NT 4.0/alpha/SP1/SP1 alpha/SP2/SP2 alpha/SP3/SP3 alpha/SP4/SP4 alpha/SP5/SP5 alpha/SP6/SP6 alpha JET/ODBC Patch and RDS Fix Registry Key Vulnerabilities source:...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

smtp_bof.txt

Subject: SECURITY TenFour TFS SMTP 3.2 Buffer Overflow To: [email protected] INTRINsec Security Advisory Release Date : August 30, 1999 Software : TenFour TFS SMTP 3.2 Operating System: Windows NT 3.x / 4.x Impact : The attackers can use a misconfigured TFS SMTP for spamming and can...

MS_security_bulletin.txt

Subject: Microsoft Security Bulletin MS99-034 To: [email protected] The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-034...

dcom_exploit.txt

Subject: Exploiting DCOM to gain Administrative rights on Windows NT 4 To: [email protected] By using a combination of problems it is a relatively easy matter for a local user to gain administrative rights on a Windows NT 4 Server or Workstation, though this situation is easily rectifiabl...

CVE-1999-0886

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5 - RASMAN Privilege Escalation

source: https://www.securityfocus.com/bid/645/info Any authenticated NT user ie domain user can modify the pathname for the RASMAN binary in the Registry. The next time the RAS Service is started, the trojan service referenced by the RASMAN pathname will be executed with system privileges. This...

BindView HackerShield 1.01.1 - HackerShield AgentAdmin Password

BindView HackerShield 1.01.1 - HackerShield AgentAdmin Password source: https://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group ...

BindView HackerShield 1.0/1.1 - HackerShield AgentAdmin Password

source: https://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group on an NT host. The service account password is not machine...

Microsoft Windows NT 4.0 - DCOM Server

Microsoft Windows NT 4.0 - DCOM Server source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registr...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

Microsoft Windows NT WINS Service Malformed Data DoS

We could crash the remote WINS server by sending it a lot of UDP packets containing random data. If you do not use WINS, then deactivate this server. An attacker may use this flaw to bring down your NT network. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10315;...