Microsoft: >> Windows Nt Security Vulnerabilities
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle.
CVSS Score
2.1
EPSS Score
0.004
Published
1999-12-31
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.
CVSS Score
2.1
EPSS Score
0.002
Published
1999-12-31
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool.
CVSS Score
2.1
EPSS Score
0.004
Published
1999-12-31
Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext.
CVSS Score
2.1
EPSS Score
0.004
Published
1999-12-31
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
CVSS Score
2.1
EPSS Score
0.034
Published
1999-12-31
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
CVSS Score
7.5
EPSS Score
0.07
Published
1999-12-31
Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
CVSS Score
5.0
EPSS Score
0.194
Published
1999-12-16
Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."
CVSS Score
7.8
EPSS Score
0.279
Published
1999-12-16
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
CVSS Score
4.6
EPSS Score
0.003
Published
1999-12-10
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
CVSS Score
5.0
EPSS Score
0.481
Published
1999-12-01