Microsoft Windows_nt 4.0 Terminal_server
Approved changes feed: RSS · Atom
cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:terminal_server:*:*:*
part: o version: 4.0 update: -
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Windows Nt (2043ab85-7cfa-522b-92d9-475c8b0cb7a0) |
| Edition | * |
| Language | * |
| Software edition | terminal_server |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2002-0862 |
vulnerable | 2026-06-08 04:46:22.396715 |
Details available
The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.
Published: 2002-09-10T04:00:00.000Z
Updated: 2024-08-08T03:03:49.357Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0367 |
vulnerable | 2026-06-08 04:46:21.297641 |
Details available
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Published: 2003-04-02T05:00:00.000Z
Updated: 2025-10-22T00:05:57.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-1127 |
vulnerable | 2026-06-08 04:44:58.215324 |
Details available
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-01T17:02:53.750Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.