Microsoft: >> Windows Nt Security Vulnerabilities
After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password.
CVSS Score
7.2
EPSS Score
0.008
Published
2000-04-11
Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request.
CVSS Score
2.1
EPSS Score
0.008
Published
2000-03-30
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
CVSS Score
7.2
EPSS Score
0.017
Published
2000-02-18
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
CVSS Score
4.6
EPSS Score
0.004
Published
2000-02-14
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.
CVSS Score
2.1
EPSS Score
0.029
Published
2000-02-04
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
CVSS Score
2.1
EPSS Score
0.002
Published
2000-02-04
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
CVSS Score
3.6
EPSS Score
0.019
Published
2000-02-01
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
CVSS Score
2.1
EPSS Score
0.008
Published
2000-01-20
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
CVSS Score
7.2
EPSS Score
0.027
Published
2000-01-12
Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries.
CVSS Score
5.0
EPSS Score
0.171
Published
1999-12-31