Remote Control Server 1.6.2 - Denial of Service

Remote Control Server 1.6.2 - Denial of Service !/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control...

DzSoft PHP Editor 3.1.2.8 - Denial of Service

!/usr/bin/perl DzSoft PHP Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $subject = "DzSoft PHP Server DOS Exploit"; $vers = "DzSoft PHP Editor 3.1.2.8"; $vendor = "http://www.dzsoft.com"; $codz ...

Remote Control Server 1.6.2 - Denial of Service

!/usr/local/bin/perl Remote Control Server DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Tested on Windows2000 SP4 Win NT Info: infamous.2hell.com $ARGC=@ARGV; if $ARGC !=1 print "\n"; print " Remote Control Server DOS Exploit\n"; print...

CVE-2001-1560

Win32k.sys aka Graphics Device Interface GDI in Windows 2000 and XP allows local users to cause a denial of service system crash by calling the ShowWindow function after receiving a WMNCCREATE message...

CVE-2001-1533

CVE-2001-1533 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. A denial of service can be triggered by a flood of fragmented UDP packets. Several sources note the vendor disputes the issue, claiming it requires high bandwidth and does not cause instability, suggesting it ma...

CVE-2001-1518

CVE-2001-1518 affects Windows 2000 where RunAs (runas.exe) can hang by a local user launching a named pipe session with the authentication server, because only a single session instance is created at a time. The Red Hat/NVD/CVEs reproduce the same description; no explicit affected build numbers b...

CVE-2000-1234

CVE-2000-1234: In Phorum 3.0.7, violation.php3 can be abused by remote attackers to send email to arbitrary addresses and possibly turn Phorum into a spam proxy by manipulating Mod and ForumName parameters. Affected: Phorum 3.0.7. Root cause: parameter handling in violation.php3 that enables emai...

CVE-2002-2028

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...

CVE-2002-2077

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session...

CVE-2001-1518

RunAs runas.exe in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service RunAs hang by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the...

CVE-2000-1235

Oracle IAS 3.0.7 and earlier are affected by CVE-2000-1235 due to default configurations of the port listener and mod_plsql, enabling remote attackers to view privileged database information via HTTP requests for DAD files. Affected component is the mod_plsql DAD handling exposed by default; root...

CVE-2002-2062

CVE-2002-2062 affects Internet Explorer 5.5/6.0 on Windows 2000 via the ftp.htt component when the user has “Enable folder view for FTP sites” and “Enable Web content in folders” enabled. The vulnerability is a cross-site scripting (XSS) issue where an attacker can inject arbitrary web script/HTM...

CVE-2000-1233

Phorum 3.0.7 contains a SQL injection vulnerability in read.php3 and other scripts that allows remote attackers to inject arbitrary SQL via the sSQL parameter. Affected component: Phorum 3.0.7 scripts; root cause: unsafely interpolated sSQL input leading to SQL query manipulation. Impact is descr...

CVE-2000-1237

The CVE-2000-1237 entry concerns the POP3 server in FTGate. The vulnerability arises because the server returns an -ERR response after receiving an invalid USER command, which can be used by a remote attacker to enumerate valid usernames and facilitate brute-force password guessing. Affected comp...

CVE-2002-2077

The vulnerability CVE-2002-2077 affects the DCOM client on Windows 2000 prior to SP3. The issue arises because memory is not properly cleared before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session. Connected Red Hat/CVE ...

CVE-2002-2035

SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password in the login form...

CVE-2000-1229

Phorum 3.0.7 is affected by a directory traversal vulnerability that allows remote Phorum administrators to read arbitrary files via dot-dot sequences in the default .langfile name field in the Master Settings admin function, causing the file to be displayed in admin.php3. The issue stems from im...

CVE-2000-1228

CVE-2000-1228 affects Phorum 3.0.7. An unauthenticated remote attacker can change the administrator password by sending an HTTP request to admin.php3 that sets the variables step, option, confirm and newPssword. The description across sources corroborates that user authentication is bypassed to a...

CVE-2001-1560

CVE-2001-1560 involves Win32k.sys (Graphics Device Interface, GDI) on Windows 2000/XP. The vulnerability arises when a local user calls the ShowWindow function after receiving a WM_NCCREATE message, enabling a local DoS (system crash). Documents consistently reference this by name and description...

CVE-2000-1232

The CVE-2000-1232 entry concerns Phorum 3.0.7, where upgrade.php3 could allow remote attackers to modify certain Phorum database tables via an unknown method. The connected documents confirm the affected product/version and the basic impact (unauthorized modification of database tables), but they...