CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2000-0247

Technical details about CVE-2000-0247 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-1349

Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 POP3...

CVE-2003-0003

CVE-2003-0003 describes a locally/remotely exploitable buffer overflow in the Microsoft Locator service (RPC Locator) that allows arbitrary code execution when processing overly large RPC requests. Affected products include Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and...

CVE-2002-1230

CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2001-0951

Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...

CVE-2001-0951

CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-2000-0797

CVE-2000-0797 describes a buffer overflow in IRIX’s gr_osview on IRIX 6.2/6.3 that allows local users to gain privileges via an excessively long -D option. The vulnerability is due to improper handling of long command-line arguments in gr_osview, enabling privilege escalation. Public references s...

CVE-2001-1302

CVE-2001-1302 relates to Windows 2000 where the Change Password option in the Windows Security UI can be misused to attempt to change passwords for other accounts on remote systems or to identify valid accounts via error messages. The vulnerability is attributed to a potential problem in the NetU...

CVE-2000-0747

The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon klogd and kills it...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...

CVE-2000-1203

The CVE-2000-1203 vulnerability affects Lotus Domino SMTP server versions 4.63–5.08. A remote attacker can trigger a denial-of-service (CPU consumption) by forging an email with the sender set to bounce@[127.0.0.1] (localhost), causing Domino to enter a mail loop. The available sources describe a...

CVE-2001-1302

The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function...

CVE-2002-1214

CVE-2002-1214 describes a buffer overflow in Microsoft PPTP Service affecting Windows XP and Windows 2000 (and Terminal Services) that can be triggered by a PPTP control data packet with malformed data. The vulnerability can lead to a denial of service and, in some cases, may allow the attacker t...

CVE-2002-1214

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a certain PPTP packet with malformed control data...

CVE-2000-0781

ARCServeIT Client Agent 6.62 is affected by a local privilege escalation vulnerability in uagentsetup, where the process does not properly verify the existence or ownership of a temporary file before it is moved to the agent.cfg configuration file. This enables local users to modify the temporary...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.