CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Microsoft : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-1999-0007 327 1998-06-26 2020-04-02
5.0
None Remote Low Not required Partial None None
Information from SSL-encrypted sessions via PKCS #1.
2 CVE-1999-0012 Bypass 1998-02-06 2008-09-09
5.0
None Remote Low Not required Partial None None
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
3 CVE-1999-0015 DoS 1997-12-16 2018-05-03
5.0
None Remote Low Not required None None Partial
Teardrop IP denial of service.
4 CVE-1999-0016 DoS 1997-12-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Land IP denial of service.
5 CVE-1999-0031 1997-07-08 2021-07-22
2.6
None Remote High Not required Partial None None
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.
6 CVE-1999-0077 1995-01-01 2017-10-10
5.0
None Remote Low Not required Partial None None
Predictable TCP sequence numbers allow spoofing.
7 CVE-1999-0104 DoS 1997-12-16 2018-08-22
5.0
None Remote Low Not required None None Partial
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.
8 CVE-1999-0140 DoS 1999-06-30 2008-09-05
5.0
None Remote Low Not required None None Partial
Denial of service in RAS/PPTP on NT systems.
9 CVE-1999-0153 DoS 1997-07-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
10 CVE-1999-0154 1999-12-31 2020-11-23
5.0
None Remote Low Not required Partial None None
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
11 CVE-1999-0179 17 Exec Code 1997-01-01 2018-08-13
5.0
None Remote Low Not required None None Partial
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
12 CVE-1999-0224 DoS 1999-07-23 2008-09-09
5.0
None Remote Low Not required Partial None None
Denial of service in Windows NT messenger service through a long username.
13 CVE-1999-0225 DoS 1998-02-14 2008-09-09
5.0
None Remote Low Not required None None Partial
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size.
14 CVE-1999-0227 264 DoS 1997-06-01 2018-08-13
5.0
None Remote Low Not required None None Partial
Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service.
15 CVE-1999-0228 DoS 1997-02-07 2018-08-13
5.0
None Remote Low Not required None None Partial
Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT.
16 CVE-1999-0229 DoS 1999-05-12 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Windows NT IIS server using ..\..
17 CVE-1999-0258 DoS 1998-02-13 2008-09-09
5.0
None Remote Low Not required None None Partial
Bonk variation of teardrop IP fragmentation denial of service.
18 CVE-1999-0274 DoS 1997-01-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made.
19 CVE-1999-0275 DoS 1997-06-10 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service in Windows NT DNS servers by flooding port 53 with too many characters.
20 CVE-1999-0278 1998-06-01 2018-10-12
5.0
None Remote Low Not required Partial None None
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
21 CVE-1999-0281 DoS 1997-06-01 2020-11-23
5.0
None Remote Low Not required None None Partial
Denial of service in IIS using long URLs.
22 CVE-1999-0288 DoS 1998-08-01 2018-05-03
5.0
None Remote Low Not required None None Partial
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.
23 CVE-1999-0292 DoS 1997-04-01 2008-09-09
5.0
None Remote Low Not required None None Partial
Denial of service through Winpopup using large user names.
24 CVE-1999-0294 DoS 1997-10-01 2008-09-09
5.0
None Remote Low Not required None None Partial
All records in a WINS database can be deleted through SNMP for a denial of service.
25 CVE-1999-0348 200 +Info 1999-01-27 2018-08-13
5.0
None Remote Low Not required Partial None None
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
26 CVE-1999-0357 DoS 1999-01-25 2008-09-09
5.0
None Remote Low Not required None None Partial
Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets.
27 CVE-1999-0372 200 +Info 1999-02-12 2018-10-12
2.1
None Local Low Not required Partial None None
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
28 CVE-1999-0376 1999-02-20 2018-10-12
4.6
None Local Low Not required Partial Partial Partial
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
29 CVE-1999-0384 1999-01-01 2018-10-12
4.6
None Local Low Not required Partial Partial Partial
The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content.
30 CVE-1999-0386 1999-03-01 2018-10-12
5.0
None Remote Low Not required Partial None None
Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL.
31 CVE-1999-0444 DoS 1999-04-12 2008-09-09
5.0
None Remote Low Not required None None Partial
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
32 CVE-1999-0448 1999-01-01 2008-09-09
5.0
None Remote Low Not required Partial None None
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
33 CVE-1999-0468 1999-04-09 2021-07-22
2.6
None Remote High Not required Partial None None
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
34 CVE-1999-0469 1999-04-01 2021-07-22
5.0
None Remote Low Not required Partial None None
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.
35 CVE-1999-0487 1999-05-01 2021-07-22
2.6
None Remote High Not required Partial None None
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
36 CVE-1999-0524 200 +Info 1997-08-01 2021-09-22
0.0
None Local Low Not required None None None
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
37 CVE-1999-0534 1997-01-01 2008-09-09
4.6
None Local Low Not required Partial Partial Partial
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
38 CVE-1999-0546 1998-10-01 2008-09-09
4.6
None Local Low Not required Partial Partial Partial
The Windows NT guest account is enabled.
39 CVE-1999-0578 1999-01-01 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.
40 CVE-1999-0582 1997-01-01 2008-09-09
5.0
None Remote Low Not required None None Partial
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc.
41 CVE-1999-0585 2000-07-01 2008-09-09
2.1
None Local Low Not required Partial None None
A Windows NT administrator account has the default name of Administrator.
42 CVE-1999-0593 1999-01-01 2017-07-11
4.9
None Local Low Not required None None Complete
The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.
43 CVE-1999-0595 2000-01-20 2008-09-09
2.1
None Local Low Not required Partial None None
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
44 CVE-1999-0612 1997-03-01 2008-09-09
0.0
None Remote Low Not required None None None
A version of finger is running that exposes valid user information to any entity on the network.
45 CVE-1999-0668 Exec Code 1999-08-21 2021-07-22
5.1
None Remote High Not required Partial Partial Partial
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
46 CVE-1999-0669 Exec Code 1999-09-01 2021-07-22
4.0
None Remote High Not required Partial Partial None
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
47 CVE-1999-0670 Exec Code Overflow 1999-09-01 2021-07-22
4.0
None Remote High Not required Partial Partial None
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
48 CVE-1999-0680 287 DoS 1999-08-09 2018-10-12
5.0
None Remote Low Not required None None Partial
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service.
49 CVE-1999-0681 DoS Overflow 2001-03-12 2017-10-10
5.0
None Remote Low Not required None None Partial
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL.
50 CVE-1999-0682 1999-08-06 2020-04-02
5.0
None Remote Low Not required None None Partial
Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled.
Total number of vulnerabilities : 3619   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.