Vulnerabilities > Microsoft > Medium

DATE CVE VULNERABILITY TITLE RISK
1998-08-01 CVE-1999-0288 Unspecified vulnerability in Microsoft Windows NT 4.0
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
network
low complexity
microsoft
5.0
1998-07-28 CVE-1999-1447 Unspecified vulnerability in Microsoft Internet Explorer 4.0
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.
network
low complexity
microsoft
5.0
1998-06-26 CVE-1999-0007 USE of A Broken OR Risky Cryptographic Algorithm vulnerability in multiple products
Information from SSL-encrypted sessions via PKCS #1.
network
low complexity
c2net hp microsoft netscape ssleay CWE-327
5.0
1998-06-01 CVE-1999-0278 Unspecified vulnerability in Microsoft Internet Information Server and Windows NT
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
network
low complexity
microsoft
5.0
1998-05-09 CVE-1999-1361 Unspecified vulnerability in Microsoft Windows NT 3.5.1/4.0
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.
network
low complexity
microsoft
6.4
1998-02-14 CVE-1999-0225 Unspecified vulnerability in Microsoft Windows NT 4.0
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
network
low complexity
microsoft
5.0
1998-02-13 CVE-1999-0258 Unspecified vulnerability in Microsoft Windows 95 and Windows NT
Bonk variation of teardrop IP fragmentation denial of service.
network
low complexity
microsoft
5.0
1998-02-06 CVE-1999-0012 Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
network
low complexity
netscape microsoft
5.0
1997-12-23 CVE-1999-1581 Unspecified vulnerability in Microsoft Windows NT 4.0
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded.
network
low complexity
microsoft
5.0
1997-12-16 CVE-1999-0104 A later variation on the Teardrop IP denial of service attack, a.k.a.
network
low complexity
caldera hp microsoft sun
5.0