CVE-2002-0367

CVE-2002-0367 affects Windows NT/2000 and involves the smss.exe debugging subsystem not properly authenticating connections to privileged processes. This allows a local attacker to gain Administrator or SYSTEM privileges by duplicating a handle to a privileged process. The vulnerability is charac...

CVE-2004-0210

CVE-2004-0210 describes a local privilege escalation in the Windows POSIX subsystem affecting Windows NT 4.0 and Windows 2000. The vulnerability is a buffer overflow caused by unchecked message length handling in the POSIX subsystem, enabling a local authenticated user to gain full system privile...

CVE-1999-0519

CVE-1999-0519 describes a Windows SMB/NETBIOS issue where a share password is default, null, or missing, enabling NULL session authentication bypass. Public sources (NVD, Red Hat, SUSE, OpenVAS/Nessus entries) consistently describe an authentication bypass risk tied to SMB/NETBIOS NULL sessions. ...

CVE-1999-0511

CVE-1999-0511 covers IP forwarding being enabled on a host that is not a router or firewall. Multiple connected sources confirm this condition and document remediation: disable IP forwarding (e.g., sysctl net.ipv4.ip_forward and related settings) and reboot where applicable. IBM bulletin notes a ...

CVE-2000-1200

CVE-2000-1200 affects Windows NT where remote attackers can enumerate domain users by obtaining the domain SID with the LsaQueryInformationPolicy policy function through a null session, then using that SID to list users. Connected findings consolidate that attackers can enumerate the host/local u...

CVE-2003-0352

A heap-based buffer overflow exists in the RPCSS Service via a certain DCOM interface for RPC in Microsoft Windows (NT 4.0, 2000, XP, and Server 2003). The vulnerability is triggered by a malformed DCERPC DCOM object activation request packet with modified length fields. This flaw allows remote a...

CVE-2003-0533

A stack-based buffer overflow vulnerability exists in the LSASRV.DLL component of the Local Security Authority Subsystem Service (LSASS) in several Microsoft Windows versions, including Windows NT 4.0 SP6a, 2000 SP2-SP4, XP SP1, Server 2003, Windows 98, and Windows ME . The root cause is located ...

CVE-1999-0506

CVE-1999-0506 affects Windows NT domain accounts with a default, null, blank, or missing password. The included sources confirm the issue as a weak-password scenario enabling logins when no proper credentials are configured, with related references noting blank administrator passwords and weak cr...

CVE-1999-0016

CVE-1999-0016 describes a land IP denial-of-service condition: a TCP packet with SYN set and identical source/destination addresses and ports can exhaust the target’s CPU. Connected records confirm the same issue reappears in later advisories (e.g., CVE-2005-0688) and is observed in Windows XP SP...

CVE-1999-0505

CVE-1999-0505 affects Windows NT domain accounts where a guessable password enables local access. The NVD entry lists a LOCAL attack vector with LOW complexity, and NULL authentication, yielding complete confidentiality, integrity, and availability impact. Connected Red Hat/NVD records reiterate ...

CVE-2002-1561

The CVE-2002-1561 issue affects the Windows RPC service stack (RPC Endpoint Mapper) on Windows 2000, NT 4.0, and XP. A malformed packet to TCP 135 can trigger a NULL pointer dereference in the RPC Endpoint Mapper, causing the RPC service to terminate and resulting in a denial of service for RPC-b...

CVE-1999-0077

CVE-1999-0077 refers to a TCP Initial Sequence Number (ISN) weakness enabling spoofing. The connected documents corroborate ISN predictability as a risk that could allow spoofed TCP connections or session hijacking, with exploitation discussed in multiple scanners/advisories. F5’s advisory explic...

CVE-2003-0818

Multiple integer overflows exist in the Microsoft ASN.1 library (MSASN1.DLL ), affecting Windows NT 4.0, 2000, and XP . These vulnerabilities are present in components such as LSASS.EXE and CRYPT32.DLL . A remote attacker can execute arbitrary code by sending ASN.1 BER encodings with very large l...

CVE-1999-0499

CVE-1999-0499 describes exposure of NETBIOS share information in Windows NT by publishing it through SNMP registry keys. Connected sources (Red Hat advisory; Nessus LANMAN disclosures) confirm information disclosure via SNMP OIDs for LanMan services/shares/users, enabling an attacker to learn tar...

CVE-2006-0010

CVE-2006-0010 describes a heap-based buffer overflow in T2EMBED.DLL on Windows platforms (Windows 98/ME, Windows 2000 SP4, Windows XP SP1/SP2, Windows Server 2003 up to SP1). The overflow is triggered while Windows decompresses Embedded Open Type (EOT) fonts referenced by web pages or email, allo...

CVE-2003-0661

The CVE-2003-0661 entry concerns the NetBIOS NBNS information disclosure vulnerability in Windows NT 4.0, 2000, XP, and Server 2003. The NBNS response may leak random memory contents from the target, potentially revealing sensitive data to remote attackers. Public details across connected documen...

CVE-2004-0574

CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...

CVE-1999-0503

CVE-1999-0503 concerns a Windows NT local user or administrator account with a guessable password. Connected sources corroborate that the issue enables basic local account compromise due to weak credentials (no explicit patch/version details provided in the documents). CVSS metrics in the initial...

CVE-2002-0391

CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...

CVE-2003-0528

Technical details for CVE-2003-0528 are not publicly provided in the supplied documents. Monitor for updates from official advisories; related CVEs (e.g., CVE-2003-0352) are discussed but do not specify 0528 specifics.

CVE-2006-0988

CVE-2006-0988 : The default configuration of the DNS Server on Windows Server 2003/2000 and Microsoft DNS Server on Windows NT 4.0 permits recursive queries and reveals delegation information to arbitrary IPs, enabling remote attackers to cause a denial of service (traffic amplification) via spoo...

CVE-2003-0719

CVE-2003-0719 is a buffer overflow in the Microsoft SSL library’s Private Communications Transport (PCT) implementation. The vulnerability allows remote code execution via crafted PCT 1.0 handshake packets on affected Windows family systems (NT 4.0 SP6a, 2000 SP2–SP4, XP SP1, Server 2003, NetMeet...

CVE-1999-0015

CVE-1999-0015 is a Teardrop IP fragmentation denial-of-service vulnerability. The connected sources describe a flaw in IP fragment reassembly that can crash or disrupt a remote server, enabling a DoS condition without authentication. The nessus entry explicitly notes the attack payload (“teardrop...

CVE-1999-0535

CVE-1999-0535 affects Windows NT password policy settings. The connected records consistently describe a vulnerability where the account policy for passwords allows insecure configurations (e.g., inadequate minimum length, inappropriate password age, and lack of uniqueness), leading to potential ...

CVE-2002-0862

CVE-2002-0862 concerns the CryptoAPI in Microsoft products (Windows 98 through XP; Office for Mac; IE for Mac; Outlook Express for Mac). The issue: the CertGetCertificateChain, CertVerifyCertificateChainPolicy, and WinVerifyTrust APIs fail to properly verify the Basic Constraints of intermediate ...

CVE-2004-0900

CVE-2004-0900 pertains to the Windows NT 4.0 DHCP Server, where an unchecked buffer during DHCP message length validation can be exploited by a remote attacker to execute arbitrary code via a malformed DHCP message. The vulnerability is part of MS04-042 (DHCP vulnerabilities) and affects Windows ...

CVE-1999-0590

Technical details are not publicly available in the provided documents for CVE-1999-0590; no affected products, versions, impact, or remediation are specified. Monitor for updates from the connected sources.

CVE-2003-0715

CVE-2003-0715 describes a heap-based buffer overflow in the Windows RPCSS DCOM interface that can be triggered by a malformed DCERPC DCOM object activation request with modified length fields, enabling remote code execution. Affected: Windows NT 4.0 SPx, 2000, XP, and Server 2003 (DCOM RPC interf...

CVE-2000-0673

The CVE-2000-0673 issue affects NetBIOS Name Server (NBNS) where the protocol lacks authentication, allowing remote attackers to cause a denial of service by sending spoofed Name Conflict or Name Release datagrams. Documented impact is DoS on affected hosts, e.g., NetBIOS name resolution disrupti...

CVE-2002-0724

CVE-2002-0724 (MS02-045) describes a remote DoS in Windows SMB where handling SMB_COM_TRANSACTION with NetShareEnum/NetServerEnum2/NetServerEnum3 can overflow the heap when Max Param/Data Count is 0. A crafted packet may crash the host (Blue Screen) and, per CERT/Core advisories, might enable fur...

CVE-1999-0504

CVE-1999-0504 describes a Windows NT local account with a default, null, blank, or missing password. Public references note exploitation paths via Windows SMB/PSEXEC‑style mechanisms and remote command execution tooling, with related Metasploit modules referencing the CVE when using an administra...

CVE-2003-0003

CVE-2003-0003 describes a locally/remotely exploitable buffer overflow in the Microsoft Locator service (RPC Locator) that allows arbitrary code execution when processing overly large RPC requests. Affected products include Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and...

CVE-2002-0053

Technical details about CVE-2002-0053 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2004-0212

CVE-2004-0212 describes a stack-based buffer overflow in the Windows Task Scheduler (mstask) that affects Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0. The vulnerability occurs in how Task Scheduler handles long parameters in .job files, allowing a remote or local attacker to ex...

CVE-2004-1049

A vulnerability exists in the Microsoft Windows LoadImage API , which is used for loading and rendering graphical resources like icons, cursors, and bitmaps. The API fails to properly validate image sizes, leading to an integer overflow and subsequent heap memory overflow . This flaw can be explo...

CVE-1999-0585

Technical details about CVE-1999-0585 are not publicly available in the provided connected documents. The materials only reiterate the default Administrator account name without product/version or impact specifics. Monitor for updates.

CVE-2000-1218

The CVE relates to Microsoft Windows 98, NT 4.0, 2000, and XP where the default domain name resolver configuration sets QueryIpMatching to 0. This causes the resolver to accept DNS updates from hosts it did not query, enabling DNS cache poisoning by a remote attacker. The PTSecurity entry confirm...

CVE-2004-0201

The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...

CVE-1999-0256

CVE-1999-0256 describes a stack-based buffer overflow in War FTP Daemon (War-FTPD) 1.65 (and potentially earlier) that affects the PASS command, allowing remote code execution or denial of service. Public materials in connected sources show confirmatory details: exploits/modules (e.g., Metasploit...

CVE-2003-0717

CVE-2003-0717 describes a buffer overflow in the Windows Messenger Service (NT through Server 2003). The root cause is improper validation of message length before writing to the allocated buffer, enabling remote code execution with the target’s privileges. Public sources (MS03-043) identify affe...

CVE-2004-0567

Summary: CVE-2004-0567 refers to a buffer/_name validation vulnerability in Windows WINS that can allow remote code execution or denial of service via specially crafted WINS packets. Affected products/versions (as stated): Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Ser...

CVE-1999-0874

CVE-1999-0874 maps to a buffer overflow in IIS 4.0’s ISAPI processing of HTR/IDC/STM files (ISM.DLL). Public sources show a remote overflow that can cause denial of service and, in several references, the potential for remote code execution on affected Windows NT systems (MS02-018/Microsoft MS99-...

CVE-2007-6026

A stack-based buffer overflow exists in the Microsoft Jet Database Engine (specifically msjet40.dll version 4.0.8618.0), which is utilized by Microsoft Access 2003 in Microsoft Office 2003 SP3 . The vulnerability is triggered by boundary errors when processing MDB database files containing a colu...

CVE-2002-1257

The CVE-2002-1257 issue affects Microsoft Virtual Machine (VM) up to and including build 5.0.3805. A remote attacker could deliver a Java applet that invokes COM objects on a web page or HTML email, allowing arbitrary code execution on the affected host. The vulnerability is severity high/critica...

CVE-2003-0906

CVE-2003-0906 is a buffer overrun in Windows WMF/EMF rendering that allows remote code execution via a malformed WMF/EMF image on Windows NT 4.0 SP6a, Windows 2000 SP2–SP4, and Windows XP SP1. Exploitation occurs when rendering or displaying the crafted metafile/image; Windows 2000/XP/NT systems ...

CVE-2004-0206

CVE-2004-0206 describes a stack/unchecked-buffer overflow in the Windows NetDDE service that allows remote code execution or local privilege elevation. Affected platforms include Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The root cause is a buffer overflow tri...

CVE-2004-0571

CVE-2004-0571 describes a remote code execution vulnerability in the Word for Windows 6.0 Converter used by WordPad. A crafted Word 6.0 document could trigger an unchecked data length/buffer handling in the converter, enabling an attacker to execute arbitrary code on a vulnerable system when the ...

CVE-2005-0045

CVE-2005-0045 is a remote code execution vulnerability in the SMB client/server implementation on Windows NT 4.0, 2000, XP and Server 2003. The issue stems from improper validation of SMB packets, enabling an attacker to execute arbitrary code by crafting SMB Transaction responses (notably Trans ...

CVE-1999-0391

CVE-1999-0391 involves the reuse of the SMB authentication cryptographic challenge in Windows 95/Windows 98, enabling an attacker to replay the response and impersonate a user. Affected software is Windows 95 and Windows 98; the vulnerability lies in the SMB authentication verification (cryptogra...

CVE-2001-0341

CVE-2001-0341 describes a remote code execution vulnerability in the Microsoft FrontPage Server Extensions, specifically the fp30reg.dll component used by IIS FrontPage. The root cause is an unchecked stack-based buffer overflow triggered by a registration URL longer than the expected length, all...