CveMateVulnerability intelligence

Microsoft Windows Nt vulnerabilities, page 5

205 vulnerabilities

Known vulnerabilities in Microsoft Windows Nt, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2000-0129microsoftwindows_nt26y ago08-02-2000 05:00

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.CVE-2000-0328microsoftwindows_nt26y ago02-06-2000 04:00

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.CVE-1999-1132microsoftwindows_nt24y ago09-03-2002 05:00

Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs.CVE-1999-1084microsoftwindows_nt25y ago12-09-2001 04:00

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.CVE-1999-1362microsoftwindows_nt24y ago25-06-2002 04:00

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.CVE-1999-1363microsoftwindows_nt24y ago09-03-2002 05:00

Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.CVE-1999-1294microsoftwindows_nt24y ago09-03-2002 05:00

Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission.CVE-1999-1579microsoftwindows_nt21y ago21-04-2005 04:00

The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.CVE-1999-1316microsoftwindows_nt24y ago09-03-2002 05:00

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.CVE-1999-1360microsoftwindows_nt24y ago09-03-2002 05:00

Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.CVE-1999-1581microsoftwindows_nt21y ago21-04-2005 04:00

Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.CVE-1999-1387microsoftwindows_nt25y ago12-09-2001 04:00

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.CVE-1999-1452microsoftwindows_nt24y ago09-03-2002 05:00

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.CVE-1999-1361microsoftwindows_nt25y ago12-09-2001 04:00

Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.CVE-1999-1157microsoftwindows_nt24y ago09-03-2002 05:00

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.CVE-1999-1222microsoftwindows_nt24y ago09-03-2002 05:00

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.CVE-1999-1317microsoftwindows_nt24y ago09-03-2002 05:00

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.CVE-1999-1364microsoftwindows_nt25y ago12-09-2001 04:00

Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.CVE-1999-1127microsoftwindows_nt24y ago09-03-2002 05:00

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.CVE-1999-1455microsoftwindows_nt24y ago09-03-2002 05:00

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.