Windows 2000 SP1 Detection

Binary data 2752.prm...

[SA14664] FileZilla Server Denial of Service Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: FileZilla Server Denial of Service Vulnerabilities...

CVE-2005-0803

CVE-2005-0803 is an EMF/WMF rendering vulnerability in Windows. The Enhanced Metafile rendering API in GDI32.DLL can crash or be exploited remotely when a specially crafted EMF/WMF file is processed, due to an unchecked buffer/invalid offsets (end, emreof, palent). Affects Windows 2000, Windows X...

CVE-2005-0803

The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service application crash via a crafted Enhanced Metafile EMF file that causes invalid 1 end, 2 emreof, or 3 palent offsets to be used, aka "Enhanced Metafile Vulnerability."...

Windows 2000 GetEnhMetaFilePaletteEntries() API DoS

Application may crash on malcrafted EMF file processing...

Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability

Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries API specially crafted EMF file DOS vulnerability 1. Description Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries API doesn't process the EMF file properly, a application which calls the API will crash when it reads some specially crafted EMF...

[VulnWatch] LLSSRV Clarifications [Immunity]

Immunity is happy to announce the release from VSC of a new paper to our public website regarding the technical details of the llssrv vulnerability Microsoft released on February 8th, 2005. Along with this paper, we've released a reliable, language-independant exploit to the CANVAS distribution. ...

Multiple Ehereal sniffer bugs

Buffer overflow during parsing of CDMA 2000 RADIUS authentication. Buffer overflow on IAPP parsing...

CVE-2003-1127

CVE-2003-1127 affects Whale Communications e-Gap 2.5 on Windows 2000. The vulnerability allows remote attackers to obtain the login page source code by using the HTTP TRACE method, bypassing the preprocessor. Documented impact is partial confidentiality loss with no indicated integrity or availab...

CVE-2003-1127

Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor...

CVE-2003-1106

The CVE-2003-1106 entry describes a DoS condition in the SMTP service of Microsoft Windows 2000 prior to SP4. A remote attacker can crash or hang the service by sending an e-mail with a malformed FILETIME timestamp. The provided documents do not specify a patch or workaround; no exploit code or i...

CVE-2003-1106

The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service crash or hang via an e-mail message with a malformed time stamp in the FILETIME attribute...

BadBlue 2.55 Web Server Remote Buffer Overflow

No description provided by source. / Badblue 2.55 Web Server remote buffer overflow Version: BadBlue Personal Edition v2.55 Date: Dec. 9, 2004 Tested under Windows 2000 Professional SP3/SP4 Spanish Windows 2000 Server SP4 Spanish Windows XP SP1 Spanish Credits: Andres Tarasco atarasco at sia.es h...

CVE-2005-0545

Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been dispute...

CVE-2005-0545

CVE-2005-0545 affects Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 in Active Directory environments. The issue allows local users to bypass group policies that restrict access to hidden drives by using Office 10 applications (Word/Excel) Browse feature or via a flash drive. The vulner...

CVE-2004-1687

Snitz Forums 2000 v3.4.04 has a CRLF injection vulnerability in down.asp that enables HTTP Response Splitting via the location parameter. This remote issue can alter the server's HTML output. OpenVAS data labels it as Snitz Forums 2000 HTTP Response Splitting . No explicit remediation/patch detai...

[VulnWatch] CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability

Core Security Technologies Advisory http://www.coresecurity.com MSN Messenger PNG Image Parsing Vulnerability Date Published: 2005-02-08 Last Update: 2005-02-08 Advisory ID: CORE-2004-0819 Bugtraq ID: None currently assigned. CVE Name: CAN-2004-0597 Title: MSN Messenger PNG Image Parsing...

MSN Messenger - .png Image Buffer Overflow Download Shellcode

MSN Messenger - .png Image Buffer Overflow Download Shellcode / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web:...

CVE-2005-0050

CVE-2005-0050 covers a remote code execution/DoS vulnerability in the Windows License Logging Service (LLS) affecting Windows NT Server, Windows 2000 Server, and Windows Server 2003. The root cause is an unchecked buffer due to improper validation of message lengths, enabling a specially crafted ...

CVE-2005-0045

The Server Message Block SMB implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing 1 Trans or 2 Trans2 commands, aka the "Server Message Block...