CVE-2001-0006 – Microsoft Windows NT 4.0 - Networking Mutex Denial of Service
https://notcve.org/view.php?id=CVE-2001-0006
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability. • https://www.exploit-db.com/exploits/20596 http://marc.info/?l=bugtraq&m=98075221915234&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003 https://exchange.xforce.ibmcloud.com/vulnerabilities/6006 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVE-2001-0047
https://notcve.org/view.php?id=CVE-2001-0047
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities. • http://www.securityfocus.com/bid/2065 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 https://exchange.xforce.ibmcloud.com/vulnerabilities/5673 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140 •
CVE-2001-0045
https://notcve.org/view.php?id=CVE-2001-0045
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities. • http://www.securityfocus.com/bid/2064 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 https://exchange.xforce.ibmcloud.com/vulnerabilities/5671 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A500 •
CVE-2001-0046
https://notcve.org/view.php?id=CVE-2001-0046
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities. • http://www.securityfocus.com/bid/2066 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095 https://exchange.xforce.ibmcloud.com/vulnerabilities/5672 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A139 •
CVE-2000-1089 – Microsoft IIS - Phone Book Service Overflow (MS00-094)
https://notcve.org/view.php?id=CVE-2000-1089
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability. • https://www.exploit-db.com/exploits/16357 https://www.exploit-db.com/exploits/20460 http://www.securityfocus.com/bid/2048 http://www.stake.com/research/advisories/2000/a120400-1.txt https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094 https://exchange.xforce.ibmcloud.com/vulnerabilities/5623 •