3183 matches found
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (4)
/ source: https://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a "loopback" condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sort is received, an infinite loo...
Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service
source: https://www.securityfocus.com/bid/2244/info The Simple Network Management Protocol SNMP provides remote network administration functions. Windows NT provides an optional SNMP implementation. Windows NT networks can use Windows Internet Name Service WINS, a DNS-like service, to register...
CVE-1999-1217
The PATH in Windows NT includes the current working directory ., which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 LSA Secrets Vulnerability
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 LSA Secrets Vulnerability. Local exploit for windows platform source: http://www.securityfocus.com/bid/231/info The HKeyLocalMachine\SECURITY\Policy\Secrets\ key contains obfuscated data for various system services/resources. Clear-text usernames a...
CVE-1999-1463
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...
CVE-1999-0275
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters...
PT-1997-1118 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue allows for a denial of service in Windows NT DNS servers. This is achieved by flooding port 53 with too many characters, causing the service to become unavailable...
CVE-1999-0227
Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...
Microsoft Windows NT 4.0 SP5 / Terminal Server 4.0 - 'Pass the Hash' with Modified SMB Client
source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need for the user to "decrypt" the...
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client
Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the...
CVE-1999-1387
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...
Microsoft Windows NT - Crash with an Extra Long 'Username' Denial of Service
You can crash an NT box possibly W95 too by sending a very long username in a Winpopup message. This is easy to do from UNIX with 'smbclient -U LOTSandLOTSofcrap -M host'. milw0rm.com 1997-04-01...
MS Windows NT Crash with an Extra Long Username DoS Exploit
Exploit for unknown platform in category dos / poc =========================================================== MS Windows NT Crash with an Extra Long Username DoS Exploit =========================================================== You can crash an NT box possibly W95 too by sending a very long...
Microsoft Windows NT - Crash with an Extra Long Username Denial of Service
Microsoft Windows NT - Crash with an Extra Long Username Denial of Service You can crash an NT box possibly W95 too by sending a very long username in a Winpopup message. This is easy to do from UNIX with 'smbclient -U LOTSandLOTSofcrap -M host'. milw0rm.com 1997-04-01...
CVE-1999-0228
Denial of service in RPCSS.EXE program RPC Locator in Windows NT...
OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow
OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow source: https://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root...
OReilly WebSite 1.x/2.0 - 'win-c-sample.exe' Buffer Overflow
source: https://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root directory. This program is vulnerable to a buffer overflow...
CVE-1999-0249
Windows NT RSHSVC program allows remote users to execute arbitrary commands...