iusr_bug.txt

Internet User Bug Security Hole -kon. I've recently found a bug in NT 4 Server w/ IIS that allows the internet user IUSRCOMPUTER to change any user's password, including the administrators, leading to total server compromise. How it's done: The attacker must have access to the NT Server's web...

nai.virusscan.nt.txt

Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 05May1999 Platform : Microsoft NT 4.0 Application : Network Associates' VirusScan NT Severity : Medium Synopsis -------- Network Associates VirusScan NT formerly McAfee VirusScan NT version 4.0.2 does not...

nt+exceed.DoS.txt

Date: Tue, 27 Apr 1999 13:29:26 -0700 From: "LaFournaise, Chris J." To: [email protected] Subject: NT/Exceed D.O.S. This is regarding Hummingbird's Exceed X emulator v5 and possibly v6 running on Windows NT. I haven't tested Win95/98. The Exceed X server allows inbound TCP connections on port...

iis.4.0.metabase.passwd.txt

Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...

eEye.retina.vs.iis4.txt

Retina vs. IIS4, Round 2, KO eEye - Digital Security Team [email protected] Tue, 15 Jun 1999 12:18:16 -0000 Retina vs. IIS4, Round 2 Systems Affected: Internet Information Server 4.0 IIS4 Microsoft Windows NT 4.0 SP3 Option Pack 4 Microsoft Windows NT 4.0 SP4 Option Pack 4 Microsoft Windows NT 4.0 SP...

CVE-1999-0680

Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service...

Microsoft Windows NT 4.0SP 1SP 2Sp 3SP 4SP 5 - Malformed Dialer Entry

Microsoft Windows NT 4.0SP 1SP 2Sp 3SP 4SP 5 - Malformed Dialer Entry // source: https://www.securityfocus.com/bid/554/info Dialer.exe has an unchecked buffer in the part of the program that reads dialer entries from %systemroot%\dialer.ini. A specially-formed entry could cause arbitrary code to ...

Microsoft Windows NT 4.0/SP 1/SP 2/Sp 3/SP 4/SP 5 - Malformed Dialer Entry

// source: https://www.securityfocus.com/bid/554/info Dialer.exe has an unchecked buffer in the part of the program that reads dialer entries from %systemroot%\dialer.ini. A specially-formed entry could cause arbitrary code to be run on the machine. By default, the %systemroot% folder is...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long username...

PT-1999-1018 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue is related to a denial of service in the Windows NT messenger service. This can be triggered through a long username. Recommendations: At the moment, there is no information...

CVE-1999-0721

Denial of service in Windows NT Local Security Authority LSA through a malformed LSA request...

CVE-1999-0728

A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them...

CVE-1999-0726

An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header...

CVE-1999-0140

Denial of service in RAS/PPTP on NT systems...

PT-1999-1007 · Microsoft · Nt

Name of the Vulnerable Software and Affected Versions: NT systems affected versions not specified Description: The issue is related to a denial of service in RAS/PPTP on NT systems. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-1999-1365

Windows NT searches a user's home directory %systemroot% by default before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program...

Microsoft Windows NT 4.0SP 1SP 2SP 3SP 4SP 5 - Null Session Admin Name

Microsoft Windows NT 4.0SP 1SP 2SP 3SP 4SP 5 - Null Session Admin Name source: https://www.securityfocus.com/bid/494/info By establishing a Null session with an NT host, an intruder can gain the name of even a renamed Administrator account. This is because even Null sessions are added to the...

Microsoft Windows NT 4.0/SP 1/SP 2/SP 3/SP 4/SP 5 - Null Session Admin Name

source: https://www.securityfocus.com/bid/494/info By establishing a Null session with an NT host, an intruder can gain the name of even a renamed Administrator account. This is because even Null sessions are added to the Everyone group for the duration of the connection. This was done so that...

CVE-1999-0723

The Windows NT Client Server Runtime Subsystem CSRSS can be subjected to a denial of service when all worker threads are waiting for user input...

Windows NT FTP 'guest' Account Present

The remote Windows host has a 'guest' FTP account enabled. This could allow a remote attacker to upload or download arbitrary files on the remote host. Note that this plugin only tests for guest accounts over FTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10166;...