Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2000-10-20	CVE-2000-0742	Unspecified vulnerability in Microsoft Windows 95 and Windows 98 The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability. network low complexity microsoft	5.0
2000-05-25	CVE-2000-0404	Unspecified vulnerability in Microsoft products The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. network low complexity microsoft	5.0
2000-05-02	CVE-2000-0347	Unspecified vulnerability in Microsoft Windows 95 and Windows 98 Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. network low complexity microsoft	5.0
1999-12-31	CVE-1999-1105	Unspecified vulnerability in Microsoft Windows 95 Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive. network low complexity microsoft	5.0
1999-12-31	CVE-1999-1104	Unspecified vulnerability in Microsoft Windows 95 Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. local low complexity microsoft	4.6
1999-12-10	CVE-1999-0975	Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed. local low complexity microsoft	4.6
1999-04-12	CVE-1999-0444	Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files. network low complexity microsoft	5.0
1999-03-08	CVE-1999-1254	Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables. network low complexity microsoft	5.0
1999-02-06	CVE-1999-1201	Unspecified vulnerability in Microsoft Windows 95 and Windows 98 Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing. network low complexity microsoft	5.0
1998-10-05	CVE-1999-1291	Unspecified vulnerability in Microsoft Windows 95 and Windows NT TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target. network low complexity microsoft	5.0