Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Windows Network Manager Privilege Elevation (Q326886)

A flaw in the Windows 2000 Network Connection Manager could enable privilege elevation. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ASP/ASA source using Microsoft Translate f: bug - Active Check

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username SPDX-FileCopyrightText: 2000 Alexander Strouk Some text descriptions might be...

Flaw in Certificate Enrollment Control (Q323172)

A vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to delete digital certificates on a user's system via HTML. Impact of vulnerability: Denial of...

RealMedia Server DoS Vulnerability

It is possible to crash a RealServer version 7 by sending a malformed HTTP request. SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer Overflow in Windows Troubleshooter ActiveX Control (826232, MS03-042)

A security vulnerability exists in the Microsoft Local Troubleshooter ActiveX control in Windows 2000. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. An attacker who successfully exploited...

Ultraseek Web Server Detect

Ultraseek Web Server is running on this host. Ultraseek has been known to contain security vulnerabilities ranging from Buffer Overflows to Cross Site Scripting issues. OpenVAS Vulnerability Test $Id: ultraseekdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Ultraseek Web Server Detect...

Buffer Overflow in Windows Troubleshooter ActiveX Control (826232)

A security vulnerability exists in the Microsoft Local Troubleshooter ActiveX control in Windows 2000. The vulnerability exists because the ActiveX control Tshoot.ocx contains a buffer overflow that could allow an attacker to run code of their choice on a user's system. To exploit this...

Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Opening Group Policy Files (Q318089)

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Attacker could block application of Group Policy Affected Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft...

Exchange 2000 Exhaust CPU Resources (Q320436)

Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources Q320436 Impact of vulnerability: Denial of Service Affected Software: Recommendation: Users using any of the affected products should install the patch immediately. Maximum Severity Rating: Critical See...

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP...

Microsoft RDP flaws could allow sniffing and DOS (Q324380)

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unify eWave ServletExec 3.0C file upload

ServletExec has a servlet called SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10570";...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

w3who.dll Buffer Overflow / XSS Vulnerability - Active Check

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. The scanner has determined that this file is installed on the remote host. SPDX-FileCopyrightText: 2004 Nicolas Gregoire Some text descriptions...

Snitz Forums 2000 SQL injection

The remote host is using Snitz Forum 2000 which allows an attacker to execute stored procedures and non-interactive operating system commands on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...