CVE-2000-0073

CVE-2000-0073 involves a buffer overflow in the Microsoft Rich Text Format (RTF) reader triggered by a malformed control word, leading to a denial of service. The affected software is the RTF reader component in Microsoft environments. The root cause is a buffer overflow condition, as described i...

CVE-2000-1079

Affected software/hardware: Microsoft Windows 95, 98, NT, and 2000. Vulnerability: Interaction between the CIFS Browser Protocol and NetBIOS allows remote modification of dynamic NetBIOS name cache entries via a spoofed Browse Frame Request carried in a unicast or UDP broadcast datagram. Impact: ...

CVE-2000-1227

CVE-2000-1227 affects Windows NT 4.0 and Windows 2000 hosts. The vulnerability allows remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests without reading the response. The available documents describe the affected products and the S...

CVE-2001-1122

CVE-2001-1122 affects Windows NT 4.0 SP 6a. A local user with write access to winnt/system32 can trigger a denial of service (crash of lsass.exe) by running the NT4ALL exploit in ‘SPECIAL’ mode. The issue is described as a local exploit with partial availability impact. The provided documents do ...

CVE-2003-0525

CVE-2003-0525 describes a heap corruption flaw in Windows NT 4.0’s file name processing (ntdll.dll) triggered by long input passed to java.io.getCanonicalPath, allowing a denial-of-service crash (noted in IBM JVM scenarios). Affected: Windows NT 4.0 environments using IBM/JVM and Java runtimes th...

CVE-2005-2827

The CVE-2005-2827 window kernel vulnerability affects Windows NT 4.0 and Windows 2000 (NTOSKRNL.EXE) where a terminating thread’s APC handling can lead to memory corruption and control of kernel execution. Root cause: during thread exit, the APC free loop in PspExitThread and related KiMoveApcSta...

CVE-2006-1591

CVE-2006-1591 describes a heap-based buffer overflow in Microsoft Windows Help winhlp32.exe caused by improper parsing of malformed .hlp files. The vulnerability permits user-assisted attackers to execute arbitrary code by crafting an embedded image data payload within a Windows Help (.hlp) file....

CVE-1999-0225

CVE-1999-0225 affects Windows NT 4.0. The vulnerability arises in the SMB logon handling where the actual data size does not match the size specified, enabling remote DoS. Connected documents corroborate the same description without adding new technical specifics, affected component is SMB logon ...

CVE-1999-0227

Technical details about CVE-1999-0227 are not publicly available in the provided documents. Monitor for updates from vendors or security advisories before attributing impact, affected products, or remediation.

CVE-1999-0886

Technical details for CVE-1999-0886 are not publicly provided in the supplied documents. Monitor for updates. The records note a RASMAN security descriptor issue enabling an alternate location via the Windows NT Service Control Manager.

CVE-1999-1455

The CVE-1999-1455 entry concerns the RSH service utility RSHSVC on Windows NT 3.5–4.0. It states that access is not properly restricted as defined by the .Rhosts file, potentially allowing login by unauthorized users from an authorized host. This is the only publicly reported description provided...

CVE-2000-0155

CVE-2000-0155 affects Windows NT Autorun: the system executes the autorun.inf file on non-removable media, allowing a local attacker to specify an alternate program to run when other users access a drive. The provided documents describe the vulnerability in terms of its existence and impact (loca...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...

CVE-2000-0544

CVE-2000-0544 affects Windows NT and Windows 2000 hosts due to malformed DCE/RPC SMBwriteX requests carrying an invalid data length, enabling a remote attacker to cause a denial of service. The connected Nessus plugin MS00-066 indicates a patch (hotfix Q272303) addressing this issue; the descript...

CVE-2001-0045

CVE-2001-0045 affects Windows NT 4.0: the default permissions on the Registry key HKLM\Software\Microsoft\Windows\RAS (RAS Administration) let local users modify the value to point to a malicious DLL, enabling local privilege escalation. The issue is a “Registry Permissions” weakness leading to a...

CVE-2003-0112

CVE-2003-0112 corresponds to a local privilege‑escalation in the Windows kernel. Technical details from connected docs show a buffer/stack overflow in ntoskrnl.exe related to debugging message handling (LpcRequestWaitReplyPort), enabling a local attacker to execute code with kernel privileges. Af...

CVE-2004-1306

The connected advisories confirm a heap-based buffer overflow in winhlp32.exe that can be triggered by a crafted .hlp file, exposing remote code execution on affected Windows versions: Windows NT, Windows 2000 (SP4), Windows XP (SP2), and Windows Server 2003. Root cause: unsafe handling during ph...

CVE-1999-0278

Microsoft IIS ASP::$DATA ASP Source Disclosure: remote attackers can obtain ASP source by appending '::$DATA' to the URL. Affected: IIS hosting ASP scripts. Root cause: information disclosure via URL handling in IIS. Exploitation details: not provided in the supplied documents. Remediation: no pa...

CVE-1999-0726

CVE-1999-0726 affects Windows NT with a DoS via executing a program that uses a malformed file image header. Connected sources reiterate the attack is a denial of service caused by malformed file image headers, but do not provide specific vulnerable components, affected product versions, or expli...

CVE-1999-1222

CVE-1999-1222 affects Netbt.sys on Windows NT 4.0. A remote DNS server can cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS hostname lookup. Impact: availability degradation/partial DoS as described; exploitation details are not provided in the supplied documents...

CVE-2000-0232

CVE-2000-0232 affects Microsoft TCP/IP Printing Services (Print Services for Unix). The vulnerability is that a malformed TCP/IP print request can be used to cause a denial of service. It is a local-attack, low-severity issue (CVSS v2 base score 2.1, availability impact PARTIAL). The documentatio...

CVE-2002-0725

CVE-2002-0725 affects NTFS on Windows NT 4.0 and Windows 2000. Local attackers can hide file usage by creating a hard link to the target file, causing the link to be recorded in the audit trail instead of the target. Root cause involves the NTFS auditing reporting hard links. Impact is local, wit...

CVE-1999-0562

Technical details on CVE-1999-0562 are not publicly provided in the connected documents. The sources reiterate that the Windows NT registry can be accessed remotely by non-administrators. Monitor for updates for concrete impact, affected versions, and remediation.

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

CVE-2002-0699

The CVE-2002-0699 issue affects the Certificate Enrollment ActiveX Control used by Windows 98/98SE/Millennium/NT 4.0/2000/XP. The root cause is a flaw in the Certificate Enrollment Control that allows remote attackers to delete digital certificates on a user’s system via HTML. OpenVAS entries cor...

CVE-2002-2028

The CVE-2002-2028 entry concerns the Windows screensaver on Windows NT 4.0, 2000, XP, and 2002. The issue is that the screensaver does not verify whether a domain account has already been locked when a valid password is supplied, enabling easier brute-force attempts by users with physical access....

CVE-1999-0249

The CVE-1999-0249 entry concerns Windows NT RSHSVC, where the RSHSVC program may allow remote users to execute arbitrary commands. The connected documents confirm the affected component (RSHSVC) and the impact (arbitrary command execution), but do not provide additional technical details such as ...

CVE-1999-0275

CVE-1999-0275 denotes a DoS in Windows NT DNS servers caused by flooding UDP/port 53 with an excessive number of characters in requests. Affected component: Windows NT DNS service; root cause: character-saturated requests overwhelm the DNS server, leading to service disruption. Documented impact:...

CVE-1999-0575

CVE-1999-0575 concerns Windows NT where the user audit policy fails to log events for a wide range of activities (Logon/Logoff, File/Object Access, User Rights, Group Management, Security Policy Changes, Restart, Shutdown, System, Process Tracking). The Red Hat entry confirms this behavior withou...

CVE-1999-0824

CVE-1999-0824 involves Windows NT where a user can use SUBST to map a drive letter to a folder. This mapping is not unmapped after log off, potentially allowing the affected user to influence the location of folders accessed by later users. The description covers the mapping behavior and its pers...

CVE-1999-1254

Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-1999-1316

Affected product: Windows NT SP2 with Passfilt.dll. Description states that Passfilt.dll allows users to create a password containing the user’s name, which could make it easier for an attacker to guess. The material provided does not specify affected build numbers beyond SP2 or any explicit reme...

CVE-1999-1317

CVE-1999-1317: A local privilege-escalation vulnerability affecting Windows NT 4.0 SP4 and earlier. The flaw arises from allowing modification of the symbolic link table in the ?? object folder by varying case letters to point to a different device, enabling local users to gain privileges. The co...

CVE-1999-0344

CVE-1999-0344 concerns an NT local privilege escalation via the Sechole exploit, allowing debug-level access to a system process (local, no authentication; high impact on confidentiality, integrity, and availability per NVD). Connected citations reiterate NT users gaining debug-level access, with...

CVE-1999-0581

CVE-1999-0581 concerns improper permissions on the HKEY_CLASSES_ROOT key in Windows NT. The connected documents consistently describe the root cause as inappropriate, system‑critical permissions on this registry hive, affecting Windows NT systems. The materials do not specify exact vulnerable pro...

CVE-1999-0728

CVE-1999-0728 affects Windows NT where a user can disable the keyboard or mouse by directly invoking the IOCTLs that control those devices. Multiple sources (NVD, CVELIST, Red Hat, Red Hat CVE page) describe the issue consistently: the vulnerability arises from using IOCTLs to manipulate input de...

CVE-1999-0755

CVE-1999-0755 affects Windows NT RRAS and RAS clients, where a user's password can be cached even if the user did not choose "Save password." The connected Red Hat, CVE, NVD, and CVE List entries describe the same issue but do not provide deeper root-cause details, exploit status, or remediation/...

CVE-1999-1364

Windows NT 4.0 is affected. Local users can crash the system by supplying an illegal kernel mode address to GetThreadContext or SetThreadContext, causing a denial of service. The description does not provide patches or mitigations; no additional exploit details are given.

CVE-2000-0404

The CVE-2000-0404 issue affects the CIFS Computer Browser service and allows remote denial of service by sending a ResetBrowser frame to the Master Browser ("ResetBrowser Frame" vulnerability). Connected sources confirm the vulnerability impact is a network-denial of service and describe two rela...

CVE-2001-0003

The CVE-2001-0003 entry concerns Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me. The issue is that WEC does not correctly process Internet Explorer security settings for NTLM authentication, which can allow an attacker to obtain NTLM credentials and potentially o...

CVE-2001-0047

CVE-2001-0047 affects Windows NT 4.0 where the registry key HKLM\SOFTWARE\Microsoft\Transaction Server\Packages (MTS) has weak permissions. Local users can modify this key to install or alter MTS packages and gain privileges, constituting a local privilege escalation as described in the Nessus en...

CVE-2002-1183

CVE-2002-1183 describes a certificate validation flaw in CryptoAPI on Microsoft Windows 98 and Windows NT 4.0 where Basic Constraints of intermediate CA certificates are not verified correctly (CertGetCertificateChain/CertVerifyCertificateChainPolicy/WinVerifyTrust). This could allow an attacker ...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

CVE-1999-0579

CVE-1999-0579 affects Windows NT where the registry audit policy does not log an event for successes or failures when non-critical registry keys are accessed. The root cause is a missing log for non-critical keys, resulting in an auditing gap. Documents from Red Hat, CVE databases, and PT-Policy ...

CVE-1999-0723

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial-of-service when all worker threads are waiting for user input. Connected records confirm CSRSS as the vulnerable component and describe the impact as availability-related DoS, CVSS v2 base score 7.1. No concrete d...

CVE-1999-0899

The CVE-1999-0899 issue concerns the Windows NT 4.0 print spooler. The vulnerability arises from inappropriate permissions that allow a local user to specify an alternate print provider, enabling the execution of arbitrary commands on the affected system. Across provided documents, this is consis...

CVE-1999-0994

SYSKEY in Windows NT pre-December 1999 had a flaw that reuses part of an RC4 keystream to encrypt the SAM database. This enables dictionary attacks against SAM passwords if an attacker obtains a copy of the SAM database. Microsoft addressed this in December 1999 (MS99-056). The CERT advisory reit...

CVE-2000-0663

The CVE-2000-0663 issue concerns Windows NT/2000 where the registry entry for Explorer.exe uses a relative path name, enabling a local user to cause arbitrary commands to run by placing a Trojan named Explorer.exe in the %Systemdrive% directory (the “Relative Shell Path” vulnerability). Affected ...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-1999-0572

CVE-1999-0572 concerns the association of .reg files with the Windows NT registry editor (regedit). The root cause is that registering .reg files with regedit can enable Trojan Horse-style attacks by tricking users into running or importing a malformed registry script. The documents consistently ...