CVE-2000-0232

CVE-2000-0232 affects Microsoft TCP/IP Printing Services (Print Services for Unix). The vulnerability is that a malformed TCP/IP print request can be used to cause a denial of service. It is a local-attack, low-severity issue (CVSS v2 base score 2.1, availability impact PARTIAL). The documentatio...

CVE-2000-0790

The CVE-2000-0790 entry describes a local-in-the-IE5.5/Windows 98 scenario where modifying Folder.htt and invoking the default execute option via the ShellDefView ActiveX control could cause Trojan horses to be run for the first listed file. No explicit affected versions beyond IE 5.5 on Windows ...

CVE-2001-0504

The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2001-1515

This CVE (CVE-2001-1515) affects Windows 2000 SP1 when Macintosh clients access NTFS volumes. The issue arises as subdirectories created by Macintosh clients automatically modify inherited NTFS permissions, potentially giving less restrictive permissions than intended. Documented by multiple sour...

CVE-2002-0725

CVE-2002-0725 affects NTFS on Windows NT 4.0 and Windows 2000. Local attackers can hide file usage by creating a hard link to the target file, causing the link to be recorded in the audit trail instead of the target. Root cause involves the NTFS auditing reporting hard links. Impact is local, wit...

CVE-2002-0823

The CVE-2002-0823 entry maps to a buffer overflow in Winhlp32.exe triggered by an HTML document calling the HTML Help ActiveX control HHCtrl.ocx with a long pathname in the Item parameter. Affected software is Microsoft Windows components involving WinHlp32.exe and HHCtrl.ocx. The root cause is a...

CVE-2002-1932

CVE-2002-1932 affects Microsoft Windows XP and Windows 2000. When configured to send administrative alerts and with the "+Do not overwrite events (clear log manually)" option enabled, the system fails to notify administrators when the event log reaches its maximum size, allowing local users and r...

CVE-2002-2028

The CVE-2002-2028 entry concerns the Windows screensaver on Windows NT 4.0, 2000, XP, and 2002. The issue is that the screensaver does not verify whether a domain account has already been locked when a valid password is supplied, enabling easier brute-force attempts by users with physical access....

CVE-2003-0662

CVE-2003-0662 describes a buffer overflow in the Windows 2000 Troubleshooter ActiveX Control (Tshoot.ocx). The vulnerability exists in Windows 2000 SP4 and earlier and allows a remote attacker to execute arbitrary code by delivering a crafted HTML document with a long argument to the RunQuery2 me...

CVE-2005-1982

CVE-2005-1982 is a PKINIT vulnerability in Kerberos used by smart card logon on Windows 2000/XP/Server 2003. The flaw allows information disclosure and spoofing by injecting into an authentication session between a client and a domain controller, potentially enabling a malicious server to imperso...

CVE-2005-3945

The CVE-2005-3945 entry describes a vulnerability in the SynAttackProtect protection of Microsoft Windows 2003 (before SP1) and Windows 2000 (before SP4 with Update Roll-up). The issue arises from using a hash of predictable data, which enables a remote attacker to cause high CPU usage by sending...

CVE-2007-5352

CVE-2007-5352 is a local privilege-escalation vulnerability in Microsoft Windows LSASS. The root cause is LSASS’s improper handling of specially crafted LPC requests, which could allow a local attacker to execute code with SYSTEM privileges and take full control of the affected system. Affected p...

CVE-2008-2252

CVE-2008-2252 maps to a Windows kernel memory corruption vulnerability (Windows kernel memory input validation). The Affected Software includes Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista (Gold/SP1), and Server 2008. Root cause: the kernel improperly validates input passed from user ...

CVE-1999-0819

NTMail contains a vulnerability where the VRFY command is not disabled even when an administrator disables it. This can expose user verification handling to the network, with partial confidentiality impact as indicated in the CVSS metrics (Network access, low attack complexity, no authentication ...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...

CVE-2001-0147

CVE-2001-0147 concerns a buffer overflow in the Windows 2000 Event Viewer snap-in. The overflow occurs when processing/displaying properties of individual event records, and can allow arbitrary code execution when a user examines a malicious event log entry. CERT/CC notes that the data enabling a...

CVE-2001-0237

CVE-2001-0237 affects Microsoft Windows 2000 domain controllers, where the Kerberos service can leak memory when it receives certain invalid Kerberos requests, potentially exhausting memory and causing a denial of service. Affected component is the Kerberos service (KDC) on Windows 2000 domain co...

CVE-2005-1212

CVE-2005-1212 is a buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe). A crafted bookmark link file with a long User field in extensions .cbo/.cbl/.cbm allows remote code execution, running with the caller’s privileges. The issue affects Step-by-Step Interactive Training ...

CVE-2006-3942

CVE-2006-3942 is a denial-of-service vulnerability in the Windows Server Service (SRV.SYS) affecting Windows NT 4.0, 2000, XP, and Server 2003. A crafted SMB_COM_TRANSACTION SMB message containing a non-terminated string can cause a NULL dereference in ExecuteTransaction, crashing the system. The...

CVE-2009-1138

CVE-2009-1138 concerns Microsoft Active Directory on Windows 2000 Server SP4, where the LDAP/LDAPS service fails to free memory for certain hex-encoded requests. The underlying issue, described as an invalid free/memory leak, can allow a remote attacker to cause arbitrary code execution on the ta...

CVE-2009-4311

CVE-2009-4311 describes an unspecified vulnerability in Microsoft's Indeo codec used by Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2, enabling remote code execution via crafted media content. Connected documents reference multiple SoCs (OpenVAS/NVD) and Microsoft security advisories (KB95575...

CVE-1999-0249

The CVE-1999-0249 entry concerns Windows NT RSHSVC, where the RSHSVC program may allow remote users to execute arbitrary commands. The connected documents confirm the affected component (RSHSVC) and the impact (arbitrary command execution), but do not provide additional technical details such as ...

CVE-1999-0723

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial-of-service when all worker threads are waiting for user input. Connected records confirm CSRSS as the vulnerable component and describe the impact as availability-related DoS, CVSS v2 base score 7.1. No concrete d...

CVE-1999-0755

CVE-1999-0755 affects Windows NT RRAS and RAS clients, where a user's password can be cached even if the user did not choose "Save password." The connected Red Hat, CVE, NVD, and CVE List entries describe the same issue but do not provide deeper root-cause details, exploit status, or remediation/...

CVE-2001-0018

The CVE-2001-0018 entry affects Windows 2000 domain controllers (Windows 2000 Server, Advanced Server, or Datacenter Server). It describes a denial-of-service vulnerability caused by remote attackers sending a flood of malformed service requests to the DC, leading to partial availability impact. ...

CVE-2002-0699

The CVE-2002-0699 issue affects the Certificate Enrollment ActiveX Control used by Windows 98/98SE/Millennium/NT 4.0/2000/XP. The root cause is a flaw in the Certificate Enrollment Control that allows remote attackers to delete digital certificates on a user’s system via HTML. OpenVAS entries cor...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

CVE-2005-1184

The CVE-2005-1184 entry describes a DoS in the TCP/IP stack across multiple operating systems: a remote attacker sends a TCP packet with the correct sequence number but an incorrect Acknowledgement number, triggering a flood of keep-alive packets and CPU consumption. The impact is listed as Parti...

CVE-2006-5584

CVE-2006-5584 affects Microsoft Windows 2000 SP4 with the Remote Installation Service (RIS) TFTP server, which is by default allowed to accept anonymous writes. The vulnerability arises from anonymous access to the RIS TFTP file structure, enabling remote attackers to upload and overwrite operati...

CVE-2006-5586

CVE-2006-5586 is a GDI-based local privilege-elevation vulnerability in the Graphics Rendering Engine of Microsoft Windows 2000 SP4 and Windows XP SP2 (and related Windows variants). The flaw stems from processing invalid application window sizes when rendering layered windows, allowing a logged-...

CVE-1999-1358

Technical details about CVE-1999-1358 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-0311

Technical details for CVE-2000-0311 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0663

The CVE-2000-0663 issue concerns Windows NT/2000 where the registry entry for Explorer.exe uses a relative path name, enabling a local user to cause arbitrary commands to run by placing a Trojan named Explorer.exe in the %Systemdrive% directory (the “Relative Shell Path” vulnerability). Affected ...

CVE-2001-0003

The CVE-2001-0003 entry concerns Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me. The issue is that WEC does not correctly process Internet Explorer security settings for NTLM authentication, which can allow an attacker to obtain NTLM credentials and potentially o...

CVE-2001-0659

CVE-2001-0659 describes a buffer overflow in the Windows 2000 IrDA driver (infrared data exchange). A malformed IrDA packet can be used by a physically proximate attacker to trigger a denial of service reboot. Technical details in connected sources identify the affected component as the IrDA driv...

CVE-2001-1288

CVE-2001-1288 affects Windows 2000 and Windows NT. Local users can trigger a denial of service (reboot) by executing a command and repeatedly pressing F7 + Enter during execution, likely tied to an exception handling issue in csrss.exe. No remediation or exploit details are provided in the connec...

CVE-2004-0726

The CVE-2004-0726 entry concerns the Windows Media Player control in Microsoft Windows 2000. Affected component: Windows Media Player control. Vulnerability: remote attackers can cause JavaScript in an ASX filename to be executed within the local computer zone, specifically in a preview panel, le...

CVE-2005-2388

CVE-2005-2388 describes a buffer overflow in a USB driver used on Microsoft Windows that could allow an attacker to execute arbitrary code. The provided documents do not specify the affected product name, exact driver version, or root cause details beyond the general buffer overflow. Exploit info...

CVE-2005-3981

Microsoft Windows XP, 2000, and 2003 are affected by a local-privilege issue where a user can kill a writable process by calling CreateRemoteThread on a process opened via OpenProcess, using certain arguments and potentially an invalid start routine address. The underlying cause involves manipula...

CVE-2006-0143

The Connected advisory CPAI-2006-171 documents a denial-of-service flaw in Microsoft Windows’ Graphics Rendering Engine (GRE) when parsing certain WMF files. Specifically, a crafted WMF with ExtCreateRegion or ExtEscape calls can trigger a memory read/parse error in GRE, causing the host applicat...

CVE-2006-3445

Summary (CVE-2006-3445) : A memory corruption and heap-based overflow exists in Microsoft Agent when processing specially crafted .ACF files. The flaw occurs in the ReadWideString handling within agentdpv.dll and can be triggered via a remote attack, typically by convincing a user to view a malic...

CVE-2006-3648

CVE-2006-3648 describes an unhandled exception vulnerability in the Windows kernel/execution environment that could enable remote code execution on affected systems. The issue arises from improper exception handling in memory-resident applications, allowing a remote attacker to gain the same priv...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-1999-0572

CVE-1999-0572 concerns the association of .reg files with the Windows NT registry editor (regedit). The root cause is that registering .reg files with regedit can enable Trojan Horse-style attacks by tricking users into running or importing a malformed registry script. The documents consistently ...

CVE-2000-0737

The CVE-2000-0737 entry describes a vulnerability in the Windows 2000 Service Control Manager (SCM) where SCM creates predictable named pipes for system services. This behavior can be abused by a local user with console access to impersonate services and gain administrator privileges. The impact ...

CVE-2001-0046

CVE-2001-0046 involves a registry permissions weakness in Windows NT 4.0 where the key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users outside the admin group. This write access enables an unprivileged (non-admin) user to gain additional privileges, constituting a ...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.

CVE-2006-4696

CVE-2006-4696 is a remote code execution vulnerability in the Windows Server Service (SMB Rename Vulnerability). It affects Windows 2000 SP4, Windows XP SP2 and earlier, and Windows Server 2003 SP1 and earlier, where a crafted SMB Rename request could cause the Server service to dereference an in...

CVE-2007-0214

CVE-2007-0214 affects the HTML Help ActiveX control (hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2/Professional, and Windows Server 2003 SP1. The vulnerability arises from improper input validation in HTML Help ActiveX methods, leading to a remote code execution flaw if a user visits a specia...