7999 matches found
SP Research Labs Advisory 13
SP Research Labs Advisory x13 ----------------------------- Orenosv HTTP/FTP Server Denial Of Service ----------------------------------------- Versions: orenosv059f Vendor: http://hp.vector.co.jp/authors/VA027031/orenosv/indexen.html Date Released - 5.25.2004 ------------------------------------...
возможность DOS в Agnitum Outpost?
Наблюдал вчера интересную штуку. В момент получения "почтовой бомбы" с помощью the bat! почтовый фильтр mailfilt.dll валит систему w2k sp4 в синий экран. Несмотря на то, что плагин почтового фильтра отключен. Версия Outpost'a 2.1.292.3816 307, версия mailfilt.dll 2.1.307. Может, конечно, случайно...
SP Research Labs Advisory 11
SP Research Labs Advisory x11 ----------------------------- MyWeb 3.3 Buffer Overflow -------------------------- Vendor Home Page: http://www.xuebrothers.net/myweb/myweb.htm Date Released - 5.6.2004 -------------------------------------- Product Description from the vendor: MyWeb is a portable we...
MS Windows XP/2K Lsasrv.dll Remote Universal Exploit (MS04-011)
Exploit for unknown platform in category remote exploits =============================================================== MS Windows XP/2K Lsasrv.dll Remote Universal Exploit MS04-011 =============================================================== / HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RP...
Microsoft Windows XP2000 - Lsasrv.dll Remote Universal (MS04-011)
Microsoft Windows XP2000 - Lsasrv.dll Remote Universal MS04-011 / HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RPC buffer overflow remote exploit Version 0.1 coded by .:: houseofdabus ::. ------------------------------------------------------------------- Usage: expl connectback IP options...
Microsoft Windows XP/2000 - 'Lsasrv.dll' Remote Universal (MS04-011)
/ HOD-ms04011-lsasrv-expl.c: MS04011 Lsasrv.dll RPC buffer overflow remote exploit Version 0.1 coded by .:: houseofdabus ::. ------------------------------------------------------------------- Usage: expl connectback IP options Targets: 0 0x01004600: WinXP Professional universal lsass.exe 1...
Microsoft Windows XP/2000 - TCP Connection Reset
AFX TCP Reset by Aphex http://www.iamaphex.cjb.net [email protected] Compile with Delphi 5/6/7 program Project1; $APPTYPE CONSOLE uses Windows; type TBufferArray = array0..65535 of byte; type iph = record ipverlen: byte; iptos: byte; iplen: word; ipid: word; ipoffset: word; ipttl: byte;...
CVE-2004-0420
CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...
CVE-2004-0118
The component for the Virtual DOS Machine VDM subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code...
CVE-2003-0910
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table LDT in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory...
CVE-2003-0807
CVE-2003-0807 : A denial-of-service vulnerability in Microsoft Windows where the COM Internet Services (CIS) and RPC over HTTP Proxy components can be overwhelmed by a crafted forwarded response, causing the backend to stop accepting requests. Related connected documents (MS04-012) identify this ...
CVE-2004-0123
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-0120
The Microsoft Secure Sockets Layer SSL library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages...
CVE-2003-0908
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialo...
CVE-2003-0910
CVE-2003-0910 concerns a privilege-elevation flaw in the Local Descriptor Table (LDT) interface on Windows NT 4.0 and Windows 2000. An attacker must be locally logged on to exploit by creating a malicious LDT entry to gain access to protected memory; Windows XP and Windows Server 2003 are not aff...
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code...
CVE-2004-0124
CVE-2004-0124 describes an information disclosure flaw in how Microsoft Windows COM object identifiers are created, enabling an attacker to coax a system into opening network ports via specially crafted RPC messages. This is part of MS04-012 RPC/DCOM updates; the impact is described as enabling a...
CVE-2004-0118
CVE-2004-0118 : A local privilege-escalation vulnerability in the Virtual DOS Machine (VDM) subsystem on Windows NT 4.0 and Windows 2000. The issue arises from insufficient validation when referencing memory allocated to VDM, allowing a locally logged-on user to gain kernel/system access and exec...
CVE-2003-0908
CVE-2003-0908 describes a local privilege-elevation issue in Windows 2000 where Utility Manager can be coerced to launch winhlp32.exe with SYSTEM privileges via crafted Windows messages targeting the Help button, enabling arbitrary code execution (as shown in a Shatter-style vector). Connected so...