Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.
Teardrop IP denial of service.
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.