| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive. |
| A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data. |
| A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded. |
| A Windows NT log file has an inappropriate maximum size or retention period. |
| A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection. |
| A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers. |
| A network intrusion detection system (IDS) does not verify the checksum on a packet. |
| A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets. |
| A network intrusion detection system (IDS) does not properly reassemble fragmented packets. |
| In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc. |
| An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information. |
| quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges. |
| An incorrect configuration of the SoftCart CGI program "SoftCart.exe" could disclose private information. |
| The rexec service is running. |
| The ident/identd service is running. |
| The NT Alerter and Messenger services are running. |
| The echo service is running. |
| The discard service is running. |
| The systat service is running. |
| The chargen service is running. |
