CVE-1999-1363

Windows NT 3.51 and 4.0 allow local users to cause a denial of service crash by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...

CVE-1999-1364

Windows NT 4.0 allows local users to cause a denial of service crash via an illegal kernel mode address to the functions 1 GetThreadContext or 2 SetThreadContext...

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...

CVE-1999-1452

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-1999-1222

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service crash by returning 0.0.0.0 as the IP address for a DNS host name lookup...

CVE-1999-1157

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...

CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-1132

Windows NT 4.0 allows remote attackers to cause a denial of service crash via extra source routing data such as 1 a Routing Information Field RIF field with a hop count greater than 7, or 2 a list containing duplicate Token Ring IDs...

CVE-1999-1359

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

camshot.overflow.txt

---------- Forwarded message ---------- From: "Ussr Labs" To: "TECHNOTRONIC" Subject: Local / Remote GET Buffer Overflow Vulnerability in CamShot WebC= am HTTP Server v2.5 for Win9x/NT Date: Thu, 30 Dec 1999 14:04:14 -0300 Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP...

McAfee 4.0 / Network Associates for Windows NT 4.0.2/4.0.3 a / Norton AntiVirus 2000 - Recycle Bin Exclusion

McAfee VirusScan 4.0,Network Associates VirusScan for Windows NT 4.0.2/4.0.3 a,Symantec Norton AntiVirus 2000 Recycle Bin Exclusion Vulnerability source: https://www.securityfocus.com/bid/956/info Many commercial virus scanners for Windows platforms exclude the Recycled folder on the hard drive...

dns-pro.dos.txt

Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability USSR Advisory Code: 22 Release Date: December 21, 1999 Systems Affected: DNS PRO v5.7 and possibly others. About The Software: The first DNS Server for Windows NT - Database engine five time faster. - Tabs now work in the...

bindview.syskey.txt

BindView Security Advisory -------- Windows NT's SYSKEY feature Issue date: December 16, 1999 Contact: Todd Sabin Topic: Vulnerability in Windows NT's SYSKEY encryption Overview: SYSKEY does not fully protect the SAM from off-line attacks. Specifically, dictionary and brute-force password crackin...

CVE-1999-0995

Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords...

Microsoft Windows 95/98/NT 4.0 - Help File Backdoor

source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...

nt.ie5.scheduler.txt

Subject: Windows NT Task Scheduler vulnerability allows user to administrator elevation Date: Thu Dec 02 1999 00:00:50 Author: Arne Vidstrom Hi all, We've found a vulnerability that the installation of Internet Explorer 5 introduces in Windows NT through the Task Scheduler service. This...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...