sunone.txt

Multiple Vulnerabilities in Sun-One Application Server ------------------------------------------------------- Release Date: May 27, 2003 System Affected Sun-ONE Application Server 7.0 for Windows 2000/XP Description During a brief audit of a SunONE Application Server installation on Windows 2000...

Eudora 5.2.1 buffer overflow DoS

Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I notice that sending a filename with many dots crashes Eudora, e.g. From: me To: you Attachment ConvertedCR: "B.A.A.A ... .A.A.A" with 122 repetitions of ".A" make it crash, writing an Exception.log file. Fewer...

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow PoC source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be du...

Microsoft NetMeeting 2.1/3.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one of the URI parameters of the CALL...

CVE-2003-0286

Snitz Forums 2000 is vulnerable to an SQL injection in register.asp: the Email parameter is not sanitized, allowing remote attackers to execute stored procedures and potentially OS commands via SQL, including stored procedures like xp_cmdshell. Affected versions include before 3.4.03 and possibly...

snitz_exec.txt

Overview: Snitz Forums 2000, one of the best ASP based bulletin board systems on the market. Getting better every day! A complete board system forum that allows the user access to a friendly and intuitive interface. http://forum.snitz.com Problem Description: Snitz Forums 3.3.03 has an SQL...

Snitz Forums 2000 register.asp Email Parameter SQL Injection

The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

EType EServ 2.982.993.0 - Resource Exhaustion (Denial of Service) (1)

EType EServ 2.982.993.0 - Resource Exhaustion Denial of Service 1 source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open...

EType EServ 2.982.993.0 - Resource Exhaustion (Denial of Service) (2)

EType EServ 2.982.993.0 - Resource Exhaustion Denial of Service 2 // source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open...

EType EServ 2.98/2.99/3.0 - Resource Exhaustion (Denial of Service) (1)

source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open connections are not properly freed when a connection no longer exists...

Microsoft Windows 2000/XP - SMB Authentication Remote Overflow

Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2 SP3 Windows XP SP0 SP1 EXPLOIT PROVIDED FOR EDUCATIONAL...

Microsoft Windows 2000XP - SMB Authentication Remote Overflow

Microsoft Windows 2000XP - SMB Authentication Remote Overflow Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2...

CrossSite Scripting @ Snitz Forums 2000

Description: The BadWord-Script-Filter can be tricked by adding the Tab-Char 0x09 into the script command. This may lead to CrossSite-Scripting. Exploit: imgjav asc ript:alert28document.cookie29/img Vendor: Has been contacted on 15. April. Patch: Available at...

Microsoft Security Bulletin MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges 811493 Date: 16 April 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact...

Microsoft Windows Server 2000 - RegEdit.exe Registry Key Value Buffer Overflow

Microsoft Windows Server 2000 - RegEdit.exe Registry Key Value Buffer Overflow // source: https://www.securityfocus.com/bid/7411/info A problem has been reported in Microsoft Windows. Due to improper bounds checking by the regedit.exe program, it may be possible for a local attacker to execute...

Microsoft Windows Server 2000 - 'RegEdit.exe' Registry Key Value Buffer Overflow

// source: https://www.securityfocus.com/bid/7411/info A problem has been reported in Microsoft Windows. Due to improper bounds checking by the regedit.exe program, it may be possible for a local attacker to execute arbitrary code as another user. / 09/04/2003...

Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow

Microsoft Windows 2000NT 4 - RPC Locator Service Remote Overflow / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual...

MS Windows RPC Locator Service Remote Exploit

Exploit for unknown platform in category remote exploits ============================================= MS Windows RPC Locator Service Remote Exploit ============================================= / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: email protected Last update: 30 march 2003 / ...

Microsoft Windows 2000/NT 4 - RPC Locator Service Remote Overflow

/ rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: [email protected] Last update: 30 march 2003 / / About Compilation: What You need to compile rpcexp.c ? 1. MS Platform SDK August SDK is sufficient. 2. Compilator f.e. MS Visual C++ 6.0. rpcns4.lib is needed for linking. / / Usage You want to...

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...