Vulnerabilities > Microsoft > Windows NT > 4.0

DATE CVE VULNERABILITY TITLE RISK
1999-12-01 CVE-1999-0819 Unspecified vulnerability in Microsoft Windows 2000 and Windows NT
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
network
low complexity
microsoft
5.0
1999-11-30 CVE-1999-0824 Unspecified vulnerability in Microsoft Windows NT 4.0
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
local
low complexity
microsoft
4.6
1999-10-26 CVE-1999-1234 Unspecified vulnerability in Microsoft Windows NT 4.0
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.
network
low complexity
microsoft
5.0
1999-07-23 CVE-1999-0224 Unspecified vulnerability in Microsoft Windows NT 4.0
Denial of service in Windows NT messenger service through a long username.
network
low complexity
microsoft
5.0
1999-05-17 CVE-1999-0489 Unspecified vulnerability in Microsoft Windows NT 4.0
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.
network
low complexity
microsoft
critical
10.0
1999-03-12 CVE-1999-0382 Unspecified vulnerability in Microsoft Windows NT 3.5.1/4.0
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
local
low complexity
microsoft
7.2
1999-02-20 CVE-1999-0376 Unspecified vulnerability in Microsoft Windows NT 3.5.1/4.0
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
local
low complexity
microsoft
4.6
1999-01-19 CVE-1999-0119 Unspecified vulnerability in Microsoft Windows NT 4.0
Windows NT 4.0 beta allows users to read and delete shares.
network
low complexity
microsoft
critical
10.0
1999-01-05 CVE-1999-0391 Unspecified vulnerability in Microsoft Terminal Server, Windows 2000 and Windows NT
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
network
low complexity
microsoft
7.5
1998-10-05 CVE-1999-1291 Unspecified vulnerability in Microsoft Windows 95 and Windows NT
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.
network
low complexity
microsoft
5.0