Microsoft: >> Windows Nt >> 4.0 Security Vulnerabilities
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
CVSS Score
4.6
EPSS Score
0.003
Published
1999-01-01
A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys.
CVSS Score
10.0
EPSS Score
0.134
Published
1999-01-01
The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions.
CVSS Score
10.0
EPSS Score
0.04
Published
1999-01-01
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
CVSS Score
4.9
EPSS Score
0.005
Published
1999-01-01
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.
CVSS Score
5.0
EPSS Score
0.086
Published
1998-10-05
A Windows NT domain user or administrator account has a guessable password.
CVSS Score
7.2
EPSS Score
0.007
Published
1998-10-01
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
CVSS Score
7.2
EPSS Score
0.076
Published
1998-10-01
The Windows NT guest account is enabled.
CVSS Score
4.6
EPSS Score
0.005
Published
1998-10-01
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
CVSS Score
5.0
EPSS Score
0.153
Published
1998-09-29
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
CVSS Score
5.0
EPSS Score
0.266
Published
1998-08-01