WN
Product
Windows NT
On CISA KEVExploited in the wild
267
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add Windows NT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0874 | – | Jun 16 | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions Affected: 4.0 |
| CVE-1999-0755 | – | May 27 | Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option Affected: 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0715 | – | May 20 | Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry Affected: 4.0 |
| CVE-1999-0716 | – | May 17 | Buffer overflow in Windows NT 4.0 help file utility via a malformed help file Affected: 4.0 |
| CVE-1999-0489 | – | May 17 | MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in… Affected: 4.0 |
| CVE-1999-0717 | – | May 7 | A remote attacker can disable the virus warning mechanism in Microsoft Excel 97 Affected: 4.0 |
| CVE-1999-0444 | – | Apr 12 | Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files Affected: All versions, or not specified |
| CVE-1999-0382 | – | Mar 12 | The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges Affected: 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; 4.0; +4 more |
| CVE-1999-1254 | – | Mar 8 | Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables Affected: All versions, or not specified |
| CVE-1999-0376 | – | Feb 20 | Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs Affected: 3.5.1; 4.0; 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0372 | – | Feb 12 | The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted Affected: All versions, or not specified |
| CVE-1999-0366 | – | Feb 8 | In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value Affected: 4.0 |
| CVE-1999-0119 | – | Jan 19 | Windows NT 4.0 beta allows users to read and delete shares Affected: 4.0 |
| CVE-1999-0391 | – | Jan 5 | The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user Affected: 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; 4.0; +5 more |
| CVE-1999-0593 | – | Jan 1 | The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in Affected: All versions, or not specified |
| CVE-1999-0581 | – | Jan 1 | The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions Affected: All versions, or not specified |
| CVE-1999-0579 | – | Jan 1 | A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys Affected: All versions, or not specified |
| CVE-1999-0578 | – | Jan 1 | A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys Affected: All versions, or not specified |
| CVE-1999-0577 | – | Jan 1 | A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories Affected: All versions, or not specified |
| CVE-1999-0570 | – | Jan 1 | Windows NT is not using a password filter utility, e.g Affected: All versions, or not specified |
| CVE-1999-0560 | – | Jan 1 | A system-critical Windows NT file or directory has inappropriate permissions Affected: All versions, or not specified |
| CVE-1999-0549 | – | Jan 1 | Windows NT automatically logs in an administrator upon rebooting Affected: All versions, or not specified |
| CVE-1999-0384 | – | Jan 1 | The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX… Affected: All versions, or not specified |
| CVE-1999-0285 | – | Jan 1 | Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection Affected: All versions, or not specified |
| CVE-1999-0226 | – | Jan 1 | Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service Affected: All versions, or not specified |
| CVE-1999-1291 | – | Oct 5 | TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other… Affected: 4.0 |
| CVE-1999-0546 | – | Oct 1 | The Windows NT guest account is enabled Affected: All versions, or not specified |
| CVE-1999-0506 | – | Oct 1 | A Windows NT domain user or administrator account has a default, null, blank, or missing password Affected: All versions, or not specified |
| CVE-1999-0505 | – | Oct 1 | A Windows NT domain user or administrator account has a guessable password Affected: All versions, or not specified |
| CVE-1999-0969 | – | Sep 29 | The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0344 | – | Aug 1 | NT users can gain debug-level access on a system process using the Sechole exploit Affected: 3.5.1; 4.0 |
| CVE-1999-0288 | – | Aug 1 | The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0278 | – | Jun 1 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL Affected: 4.0 |
| CVE-1999-1361 | – | May 9 | Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets,… Affected: 3.5.1; 4.0 |
| CVE-1999-0225 | – | Feb 14 | Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size Affected: 4.0 |
| CVE-1999-0258 | – | Feb 13 | Bonk variation of teardrop IP fragmentation denial of service Affected: All versions, or not specified |
| CVE-1999-0256 | – | Feb 1 | Buffer overflow in War FTP allows remote execution of commands Affected: All versions, or not specified |
| CVE-1999-1581 | – | Dec 23 | Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-1999-0104 | – | Dec 16 | A later variation on the Teardrop IP denial of service attack, a.k.a Affected: 4.0; 4.0; 4.0 |
| CVE-1999-0015 | – | Dec 16 | Teardrop IP denial of service Affected: 3.5.1; 3.5.1; 3.5.1; 4.0; 4.0; 4.0 |
| CVE-1999-0016 | – | Dec 1 | Land IP denial of service Affected: 4.0 |
| CVE-1999-1217 | – | Jul 25 | The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly… Affected: All versions, or not specified |
| CVE-1999-1463 | – | Jul 10 | Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the… Affected: through 4.0 |
| CVE-1999-0153 | – | Jul 1 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke Affected: All versions, or not specified |
| CVE-1999-0074 | – | Jul 1 | Listening TCP ports are sequentially allocated, allowing spoofing attacks Affected: All versions, or not specified |
| CVE-1999-0275 | – | Jun 10 | Denial of service in Windows NT DNS servers by flooding port 53 with too many characters Affected: All versions, or not specified |
| CVE-1999-0227 | – | Jun 1 | Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service Affected: 4.0 |
| CVE-1999-1387 | – | Apr 2 | Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that… Affected: 4.0 |
| CVE-1999-0292 | – | Apr 1 | Denial of service through Winpopup using large user names Affected: 4.0; 4.0 |
| CVE-1999-0612 | – | Mar 1 | A version of finger is running that exposes valid user information to any entity on the network Affected: All versions, or not specified |