WN
Product
Windows NT
On CISA KEVExploited in the wild
267
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add Windows NT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2000-0331 | – | Apr 20 | Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the… Affected: 4.0 |
| CVE-2000-0256 | – | Apr 19 | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site,… Affected: 4.0 |
| CVE-2000-0259 | – | Apr 12 | The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of… Affected: 4.0 |
| CVE-1999-0701 | – | Apr 11 | After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password Affected: 4.0 |
| CVE-2000-0232 | – | Mar 30 | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request Affected: 4.0 |
| CVE-2000-0155 | – | Feb 18 | Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive Affected: 4.0 |
| CVE-2000-0197 | – | Feb 14 | The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a… Affected: 4.0 |
| CVE-2000-0129 | – | Feb 4 | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file Affected: 4.0 |
| CVE-2000-0089 | – | Feb 4 | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it,… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-2000-0121 | – | Feb 1 | The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-1999-0595 | – | Jan 20 | A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded Affected: 3.5.1; 4.0 |
| CVE-2000-0070 | – | Jan 12 | NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request." Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-1999-1455 | – | Dec 31 | RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could… Affected: through 4.0 |
| CVE-1999-1452 | – | Dec 31 | GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into… Affected: 4.0 |
| CVE-1999-1364 | – | Dec 31 | Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext Affected: 4.0 |
| CVE-1999-1363 | – | Dec 31 | Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool Affected: 3.5.1; 4.0 |
| CVE-1999-1362 | – | Dec 31 | Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters Affected: through 4.0 |
| CVE-1999-1360 | – | Dec 31 | Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the… Affected: 4.0 |
| CVE-1999-1359 | – | Dec 31 | When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to… Affected: All versions, or not specified |
| CVE-1999-1358 | – | Dec 31 | When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could… Affected: All versions, or not specified |
| CVE-1999-1317 | – | Dec 31 | Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower)… Affected: through 4.0 |
| CVE-1999-1316 | – | Dec 31 | Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess Affected: 4.0 |
| CVE-1999-1294 | – | Dec 31 | Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar,… Affected: 3.51 |
| CVE-1999-1222 | – | Dec 31 | Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup Affected: 4.0; 4.0 |
| CVE-1999-1157 | – | Dec 31 | Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are… Affected: through 4.0 |
| CVE-1999-1132 | – | Dec 31 | Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count… Affected: 4.0 |
| CVE-1999-1084 | – | Dec 31 | The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on… Affected: 4.0; 4.0 |
| CVE-1999-0815 | – | Dec 31 | Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries Affected: through 4.0 |
| CVE-1999-0995 | – | Dec 16 | Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0994 | – | Dec 16 | Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0975 | – | Dec 10 | The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to… Affected: 4.0 |
| CVE-1999-0819 | – | Dec 1 | NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it Affected: 4.0 |
| CVE-1999-0824 | – | Nov 30 | A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-1999-0987 | – | Nov 18 | Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name Affected: All versions, or not specified |
| CVE-2000-0073 | – | Nov 17 | Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word Affected: 4.0 |
| CVE-1999-0899 | – | Nov 4 | The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-1999-0898 | – | Nov 4 | Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +1 more |
| CVE-1999-1234 | – | Oct 26 | LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3)… Affected: 4.0 |
| CVE-1999-0909 | – | Sep 20 | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0886 | – | Sep 17 | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-2000-0328 | – | Aug 24 | Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0700 | – | Jul 29 | Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0224 | – | Jul 23 | Denial of service in Windows NT messenger service through a long username Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0721 | – | Jul 20 | Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request Affected: 4.0; 4.0 |
| CVE-1999-0728 | – | Jul 6 | A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0918 | – | Jul 3 | Denial of service in various Windows systems via malformed, fragmented IGMP packets Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0726 | – | Jun 30 | An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header Affected: 4.0; 4.0; 4.0 |
| CVE-1999-0140 | – | Jun 30 | Denial of service in RAS/PPTP on NT systems Affected: All versions, or not specified |
| CVE-1999-1365 | – | Jun 28 | Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or… Affected: All versions, or not specified |
| CVE-1999-0723 | – | Jun 23 | The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input Affected: 4.0 |