WN
Product
Windows NT
On CISA KEVExploited in the wild
267
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add Windows NT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-1184 | – | Nov 12 | The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +18 more |
| CVE-2002-0863 | – | Oct 11 | Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2002-0693 | – | Oct 10 | Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000,… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2002-0694 | – | Oct 10 | The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2002-0699 | – | Oct 4 | Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and… Affected: 4.0 |
| CVE-2002-0862 | – | Oct 4 | The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98… Affected: 4.0; 4.0 |
| CVE-2002-0724 | – | Sep 24 | Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +18 more |
| CVE-2002-0421 | – | Aug 12 | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory,… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2002-0366 | – | Jul 3 | Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2002-0151 | – | Apr 4 | Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-2002-0070 | – | Mar 15 | Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been… Affected: 4.0; 4.0 |
| CVE-2002-0018 | – | Mar 8 | In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative… Affected: All versions, or not specified |
| CVE-2002-0053 | – | Mar 8 | Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary… Affected: 4.0 |
| CVE-2001-0879 | – | Dec 20 | Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service Affected: All versions, or not specified |
| CVE-2001-0663 | – | Dec 6 | Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets Affected: 4.0 |
| CVE-2001-0662 | – | Oct 30 | RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request Affected: 4.0 |
| CVE-2001-0509 | – | Sep 20 | Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote… Affected: 4.0 |
| CVE-2001-0543 | – | Sep 20 | Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts Affected: 4.0 |
| CVE-2000-1200 | – | Aug 31 | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-2001-1122 | – | Aug 3 | Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL'… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2001-1288 | – | Jul 27 | Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2001-0341 | – | Jul 21 | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2001-0238 | – | Jul 2 | Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests Affected: 4.0 |
| CVE-2001-0373 | – | Jun 18 | The default configuration of the Dr Affected: 4.0 |
| CVE-2001-0281 | – | May 3 | Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain… Affected: All versions, or not specified |
| CVE-2001-0017 | – | Mar 12 | Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability Affected: through 4.0 |
| CVE-2001-0016 | – | Mar 12 | NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access Affected: through 4.0 |
| CVE-2001-0047 | – | Feb 16 | The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS)… Affected: 4.0; terminal_server |
| CVE-2001-0046 | – | Feb 16 | The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive… Affected: 4.0 |
| CVE-2001-0045 | – | Feb 16 | The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka… Affected: 4.0; terminal_server |
| CVE-2001-0003 | – | Feb 12 | Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which… Affected: All versions, or not specified |
| CVE-2000-1149 | – | Jan 9 | Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login… Affected: terminal_server |
| CVE-2000-1089 | – | Jan 9 | Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability Affected: 4.0 |
| CVE-2000-1039 | – | Jan 9 | Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP… Affected: 4.0 |
| CVE-2000-1227 | – | Dec 31 | Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2000-0885 | – | Dec 19 | Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community… Affected: 4.0; 4.0; 4.0 |
| CVE-1999-1579 | – | Dec 14 | The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service… Affected: 4.0 |
| CVE-2000-0858 | – | Nov 14 | Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to… Affected: 4.0 |
| CVE-2000-1079 | – | Aug 29 | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache… Affected: 4.0 |
| CVE-2000-0673 | – | Jul 27 | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name… Affected: 4.0; terminal_server |
| CVE-2000-0663 | – | Jul 25 | The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands… Affected: 4.0 |
| CVE-1999-0585 | – | Jul 1 | A Windows NT administrator account has the default name of Administrator Affected: 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; 4.0 |
| CVE-2000-0377 | – | Jun 8 | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka… Affected: 4.0 |
| CVE-2000-0544 | – | Jun 5 | Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length Affected: 4.0 |
| CVE-1999-0590 | – | Jun 1 | A system does not present an appropriate legal message or warning to a user who is accessing it Affected: 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; 4.0 |
| CVE-2000-0404 | – | May 25 | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame"… Affected: 4.0 |
| CVE-2000-0403 | – | May 25 | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master… Affected: 4.0 |
| CVE-2000-0305 | – | May 19 | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical… Affected: 4.0 |
| CVE-1999-0980 | – | May 16 | Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request Affected: 4.0; 4.0; 4.0; 4.0 |