CVE-2001-0047

CVE-2001-0047 affects Windows NT 4.0 where the registry key HKLM\SOFTWARE\Microsoft\Transaction Server\Packages (MTS) has weak permissions. Local users can modify this key to install or alter MTS packages and gain privileges, constituting a local privilege escalation as described in the Nessus en...

CVE-2004-0124

CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-1999-0228

CVE-1999-0228 describes a denial-of-service issue in RPCSS.EXE (RPC Locator) on Windows NT. The provided documents confirm the vulnerable component but do not reveal concrete root-cause details, affected versions beyond Windows NT in general, exploitable conditions, or any remediation/patch infor...

CVE-1999-0572

CVE-1999-0572 concerns the association of .reg files with the Windows NT registry editor (regedit). The root cause is that registering .reg files with regedit can enable Trojan Horse-style attacks by tricking users into running or importing a malformed registry script. The documents consistently ...

CVE-1999-0577

The CVE-1999-0577 issue affects Windows NT with the file audit policy failing to log events for non-critical files/directories. Affected component: Windows NT file audit policy (logging of success/failure). Root cause: audit policy does not log certain accesses, per multiple sources (NVD/Red Hat/...

CVE-1999-0578

CVE-1999-0578 affects Windows NT; multiple connected sources confirm the issue is that the registry auditing policy does not log events for security-critical registry keys (both success and failure). Documented scope: Windows NT OS with registry audit policy lacking event logging for cryptographi...

CVE-1999-0975

The CVE-1999-0975 entry describes a local privilege escalation in the Windows Help system: by editing a table of contents metafile (.CNT) and altering the topic action, a local user could cause commands to execute when the .hlp file is opened. The remediation/affected product details beyond this ...

CVE-1999-1358

Technical details about CVE-1999-1358 are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-1452

CVE-1999-1452 concerns GINA in Windows NT 4.0 where an attacker with physical access can cause the user’s locked workstation clipboard to be partially exposed by pasting into the username prompt. The description states the effect but does not provide root-cause details, affected components beyond...

CVE-2001-0016

CVE-2001-0016 concerns the NTLMSSP (NTLM Security Support Provider) service. The LPC request handling bug allows a local user to gain administrator-level privileges by exploiting improper function-number checks, enabling local privilege escalation on affected Windows systems. Reported as MS01-008...

CVE-2001-0662

CVE-2001-0662 affects the RPC Endpoint Mapper in Windows NT 4.0. A remote attacker can cause a denial of service by sending a malformed request, leading to loss of RPC services. The vulnerability lies in the RPC service’s endpoint mapper; exploitation results in service disruption (no information...

CVE-2001-1288

CVE-2001-1288 affects Windows 2000 and Windows NT. Local users can trigger a denial of service (reboot) by executing a command and repeatedly pressing F7 + Enter during execution, likely tied to an exception handling issue in csrss.exe. No remediation or exploit details are provided in the connec...

CVE-2005-1184

The CVE-2005-1184 entry describes a DoS in the TCP/IP stack across multiple operating systems: a remote attacker sends a TCP packet with the correct sequence number but an incorrect Acknowledgement number, triggering a flood of keep-alive packets and CPU consumption. The impact is listed as Parti...

CVE-1999-0274

CVE-1999-0274 affects Windows NT DNS servers. The vulnerability arises when a malicious UDP/DNS response is sent that answers a query that was not issued, enabling a Denial of Service. Connected sources corroborate the issue as a DoS against Windows NT DNS servers via crafted packets. The documen...

CVE-1999-0593

Windows NT permits shutdown without authentication due to the Winlogon ShutdownWithoutLogon default setting. Affected: Windows NT; component: Winlogon registry entry ShutdownWithoutLogon. Root cause: default configuration. Impact: local shutdown without login (availability). No exploit details or...

CVE-1999-0995

The CVE-1999-0995 entry affects Microsoft Windows NT, specifically the Local Security Authority (LSA). The vulnerability arises from malformed arguments passed to the LsaLookupSids function (which looks up a Security Identifier), enabling remote attackers to cause a denial of service. This is the...

CVE-1999-1132

CVE-1999-1132 affects Windows NT 4.0. The vulnerability allows remote users to cause a denial of service (crash) by sending crafted source routing data, specifically (1) a Routing Information Field with hop count greater than 7, or (2) a list containing duplicate Token Ring IDs. The Connected rec...

CVE-1999-1234

The CVE concerns LSA/LSASS.EXE on Windows NT 4.0. A NULL policy handle allows remote attackers to cause a denial of service via three specific Samr calls: SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo. The affected component is the Local Security Authority (LSA) within LSASS; root ...

CVE-2000-0858

CVE-2000-0858 targets Microsoft Windows NT 4.0 with Internet Information Services (IIS). The issue occurs when an IIS process (INETINFO.EXE) processes a sequence of malformed requests, leading to a denial-of-service condition. Affected component is IIS on Windows NT 4.0; root cause is malformed r...

CVE-2003-1407

The CVE-2003-1407 entry concerns a buffer overflow in cmd.exe on Windows NT 4.0 that can allow a local user to execute arbitrary code via a long pathname argument to the cd command. The NVD summary indicates a local-exploit scenario with no authentication and a high impact (confidentiality, integ...

CVE-1999-1294

The vulnerability concerns the Office Shortcut Bar (OSB) in Windows 3.51 . The OSB enables backup and restore permissions, and these permissions are inherited by programs (e.g., File Manager) launched from the Shortcut Bar. As a result, local users could read folders for which they do not have pe...

CVE-2000-0121

The CVE-2000-0121 entry concerns the Recycle Bin utility in Windows NT and Windows 2000. The root cause is that a local attacker can create a subdirectory named with the victim’s SID inside the recycler directory, enabling read or modification of files by the attacker. This constitutes a local pr...

CVE-2000-1149

The CVE-2000-1149 issue affects Microsoft Windows NT 4.0 Terminal Server, where a buffer overflow in RegAPI.DLL allows remote code execution via a specially crafted username. The vulnerability can be exploited by anyone with access to port 3389/TCP and could grant the attacker the privileges of a...

CVE-2001-0046

CVE-2001-0046 involves a registry permissions weakness in Windows NT 4.0 where the key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users outside the admin group. This write access enables an unprivileged (non-admin) user to gain additional privileges, constituting a ...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

CVE-2002-1712

Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...

CVE-1999-1359

The CVE-1999-1359 entry concerns Windows NT where, when the Ntconfig.pol file is used on a server with a name longer than 13 characters, policies for global groups are not properly enforced. This could allow bypass of restrictions intended by those policies (as described in multiple sources). Aff...

CVE-1999-1363

CVE-1999-1363 affects Windows NT 3.51 and 4.0. The vulnerability allows a local attacker to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts NonPagedPool. The documented impact is a partial availability degradation; exploitation...

CVE-1999-0549

The CVE-1999-0549 entry pertains to Windows NT, where the system automatically logs in an administrator upon reboot. Affected software: Windows NT. Vulnerability: administrative login occurs without user authentication at boot. Root cause and exact exploit vector are not detailed in the provided ...

CVE-1999-1362

CVE-1999-1362 : Affected component is Win32k.sys on Windows NT 4.0 (pre-SP2). Local users can trigger a denial-of-service (crash) by calling certain WIN32K functions with incorrect parameters. The available documents do not provide a root-cause analysis beyond this description, nor any explicit r...

CVE-2000-0197

The CVE-2000-0197 entry describes a local privilege escalation in Windows NT where the scheduler uses the drive mapping of the currently logged-in interactive user. A local attacker could gain privileges by placing a Trojan horse batch file in place of the original batch file, enabling execution ...

CVE-2000-0403

CVE-2000-0403 affects the CIFS Computer Browser service on Windows NT 4.0. The vulnerability allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables (HostAnnouncement Flooding/HostAnnouncement Frame). The connected ...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

CVE-2001-0006

The CVE-2001-0006 issue affects Windows NT 4.0 (and Terminal Server Edition) where the Winsock2ProtocolCatalogMutex has insecure Everyone/Full Control permissions. This allows a local user to modify the ACL to “No Access,” effectively disabling Winsock network connectivity and causing a denial of...

CVE-1999-0534

Technical details for CVE-1999-0534 are not publicly provided in the supplied documents. Monitor for updates.

CVE-1999-1084

The CVE-1999-1084 entry describes insecure permissions on the AEDebug registry key, enabling local users to modify it to specify a Trojan Horse debugger that is automatically executed on a system crash. Affected component: AEDebug registry key. Root cause: insecure registry permissions. Impact: m...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-1999-0815

CVE-1999-0815 describes a memory leak in the SNMP agent of Windows NT 4.0 before SP5. This vulnerability allows remote attackers to cause a denial of service (memory exhaustion) by sending a large number of queries. The affected component is the SNMP agent on Windows NT 4.0 SP5 or earlier; the ro...

CVE-1999-0987

CVE-1999-0987 affects Windows NT where a domain user logging in with a trailing space in the domain name can cause the system policy to download improperly. The CVSS v2 base score is 10.0 (HIGH) with network attack vector and no authentication required, indicating a severe impact on confidentiali...

CVE-1999-0969

CVE-1999-0969 affects the Windows NT RPC service. A remote attacker can trigger a denial-of-service by sending spoofed malformed RPC packets that cause the service to emit an error message back to the spoofed host, potentially creating a loop (the Snork vulnerability). The available documents ide...

CVE-1999-1387

The CVE describes a remote denial-of-service in Windows NT 4.0 SP2 caused by malformed SMB inputs/packets (e.g., a Linux smbmount-generated packet) that can crash the system when executed on an older kernel. Affected software: Windows NT 4.0 SP2. Root cause: improper handling of crafted inputs le...

CVE-2001-0017

The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...

CVE-1999-0582

CVE-1999-0582 describes a misconfigured Windows NT account policy with insecure lockout settings (e.g., lockout duration, count of bad logon attempts). The NVD entry classifies impact as partial availability with network access, no confidentiality/integrity impact, and no authentication required,...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS are affected by CVE-1999-1361, where a remote attacker can cause a denial of service by sending a flood of malformed packets. The issue may exhaust resources, degrade performance, and fill event logs with errors. The available sources describe the vulnerabilit...

CVE-1999-1463

Windows NT 4.0 before SP3 is affected by CVE-1999-1463 via the TCP/IP stack. The issue arises when a remote attacker sends improperly fragmented IP packets without the first fragment, which are reassembled by the stack into a valid session, allowing bypass of firewall restrictions or causing a de...

CVE-2000-0377

CVE-2000-0377 affects Windows NT 4.0 Remote Registry server. A malformed remote registry request allows locally authenticated users to cause a denial of service by triggering winlogon.exe to fail, effectively rendering the system unstable. Exploitation is reported to be possible over the network ...

CVE-1999-1217

Technical details about CVE-1999-1217 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-1999-1579

CVE-1999-1579 affects the Cenroll ActiveX control (xenroll.dll) used in Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 prior to SP6. The vulnerability enables remote attackers to cause a denial of service via resource consumption by creating a large number of arbitrary files...

CVE-1999-1581

The CVE-1999-1581 issue affects the SNMP agent (snmp.exe) on Windows NT 4.0 prior to Service Pack 4. The vulnerability is a memory leak triggered by a high volume of SNMP packets containing undecodable OIDs, leading to denial of service via memory exhaustion. The provided sources describe the aff...