| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry. |
| After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password. |
| Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file. |
| A version of finger is running that exposes valid user information to any entity on the network. |
| Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share. |
| A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. |
| The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. |
| Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT. |
| Windows NT automatically logs in an administrator upon rebooting. |
| In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. |
| A system does not present an appropriate legal message or warning to a user who is accessing it. |
| Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection. |
| The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets. |
| The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL. |
| The registry in Windows NT can be accessed remotely by users who are not administrators. |
| Denial of service in RAS/PPTP on NT systems. |
| Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. |
| A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. |
| A Windows NT administrator account has the default name of Administrator. |
| Denial of service through Winpopup using large user names. |
