4.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2008-5232	787	2	Exec Code Overflow	2008-11-26	2019-12-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
2	CVE-2007-6026	119		Exec Code Overflow	2007-11-20	2018-10-15	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
3	CVE-2007-1973			+Priv	2007-04-11	2018-10-16	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
4	CVE-2006-1184			DoS	2006-05-10	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
5	CVE-2006-0988			DoS	2006-03-03	2018-10-18	7.8	None	Remote	Low	Not required	None	None	Complete
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
6	CVE-2006-0034	119		Exec Code Overflow	2006-05-10	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
7	CVE-2006-0010	119		Exec Code Overflow	2006-01-10	2019-04-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
8	CVE-2005-2827				2005-12-14	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
9	CVE-2005-2150				2005-07-11	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.
10	CVE-2004-0900			Exec Code	2005-01-10	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
11	CVE-2004-0899			DoS	2005-01-10	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
12	CVE-2004-0569			DoS	2004-11-03	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values.
13	CVE-2004-0568			Exec Code Overflow	2005-01-10	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
14	CVE-2004-0208			+Priv	2004-11-03	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
15	CVE-2004-0207			+Priv	2004-11-03	2018-10-12	2.1	None	Local	Low	Not required	None	Partial	None
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
16	CVE-2004-0206			Exec Code Overflow +Priv	2004-11-03	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
17	CVE-2004-0124				2004-06-01	2018-10-12	2.6	None	Remote	High	Not required	Partial	None	None
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
18	CVE-2004-0123	119		DoS Exec Code Overflow	2004-06-01	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
19	CVE-2004-0118			Exec Code	2004-06-01	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
20	CVE-2003-1407	119		Exec Code Overflow	2003-12-31	2017-07-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
21	CVE-2003-0910			Exec Code	2004-06-01	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.
22	CVE-2003-0227	119		DoS Exec Code Overflow	2003-06-09	2020-11-13	5.0	None	Remote	Low	Not required	None	None	Partial
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
23	CVE-2002-2401	264		Bypass	2002-12-31	2019-04-30	3.6	None	Local	Low	Not required	Partial	Partial	None
NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.
24	CVE-2002-2073			XSS	2002-12-31	2016-10-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) ctr parameter in Default.asp and (2) the query string to formslogin.asp.
25	CVE-2002-1183			Exec Code	2002-12-11	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).
26	CVE-2002-0862				2002-10-04	2021-07-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.
27	CVE-2002-0699				2002-10-04	2018-10-12	5.0	None	Remote	Low	Not required	None	Partial	None
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
28	CVE-2002-0367			+Priv	2002-06-25	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
29	CVE-2002-0070	119		Exec Code Overflow	2002-03-15	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
30	CVE-2002-0053	119		DoS Exec Code Overflow	2002-03-08	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.
31	CVE-2001-1244			DoS	2001-07-07	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
32	CVE-2001-1122			DoS	2001-08-03	2017-12-19	2.1	None	Local	Low	Not required	None	None	Partial
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
33	CVE-2001-0663			DoS	2001-12-06	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.
34	CVE-2001-0662			DoS	2001-10-30	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
35	CVE-2001-0543	401		DoS	2001-09-20	2020-04-02	5.0	None	Remote	Low	Not required	None	None	Partial
Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.
36	CVE-2001-0509	20		DoS	2001-09-20	2020-04-02	5.0	None	Remote	Low	Not required	None	None	Partial
Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
37	CVE-2001-0373				2001-06-18	2017-10-10	2.1	None	Local	Low	Not required	Partial	None	None
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information.
38	CVE-2001-0238			Bypass	2001-07-02	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
39	CVE-2001-0047			+Priv	2001-02-16	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
40	CVE-2001-0046			+Info	2001-02-16	2018-10-12	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities.
41	CVE-2001-0045			Exec Code	2001-02-16	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.
42	CVE-2001-0006			DoS	2001-02-12	2018-10-12	2.1	None	Local	Low	Not required	None	None	Partial
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.
43	CVE-2000-1218				2000-04-14	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache.
44	CVE-2000-1200			+Info	2001-08-31	2017-10-10	5.0	None	Remote	Low	Not required	Partial	None	None
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
45	CVE-2000-1089			Exec Code Overflow	2001-01-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
46	CVE-2000-1079				2000-08-29	2017-12-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
47	CVE-2000-1039			DoS	2001-01-09	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
48	CVE-2000-0885			Exec Code Overflow	2000-12-19	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this candidate will be split into multiple candidates.
49	CVE-2000-0858			DoS	2000-11-14	2017-10-10	5.0	None	Remote	Low	Not required	None	None	Partial
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.
50	CVE-2000-0673			DoS	2000-07-27	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the "NetBIOS Name Server Protocol Spoofing" vulnerability.

Total number of vulnerabilities : 120 Page : 1 (This Page)2 3