Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002)

NGSSoftware Insight Security Research Advisory Name: IIS 5 & 5.1 Denial Of Service Vulnerability Systems Affected: Windows 2000 and XP all service packs. Severity: Moderate Category: Denial of Service Vendor URL: http://www.mircosoft.com Author: Mark Litchfield [email protected] Date: 31st...

Windows 2000 system partition weak default permissions

Everyone/Full Control permission allows to change initiall boot files regardless of individual file permissions...

Windows 2000/XP PPTP buffer overflow

Malformed PPTP packets causes service to crash...

Microsoft Windows 2000 SNMP service leaks memory when querying printer objects if spooler service is stopped

Overview A memory leak exists in the Windows 2000 SNMP service. Under a specific precondition, it can result in a remote denial-of-service vulnerability. Description If the SNMP service is running on a Windows 2000 server, and the 'Print Spooler' service is not running, repeatedly using SNMP...

MS02-025: Exchange 2000 Exhaust CPU Resources (320436)

The remote host is running Exchange Server 2000. The remote version of this software contains a flaw that allows an attacker to cause a temporary denial of service. To do this, the attacker needs to send an email message with malformed attributes. CPU utilization will spike at 100% until the...

CVE-2001-1451

Memory leak in the SNMP LAN Manager LANMAN MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service memory consumption via a large number of GET or GETNEXT requests...

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (2)

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 2 // source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the...

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (1)

Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 1 // source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the...

[Immunity, Inc.]Vulnerability: RPC Service DoS (port 135/tcp) on Windows 2000 SP3

Immunity Advisory to the General Public Vulnerability: RPC Service DoS port 135/tcp on Windows 2000 SP3 Author: Dave Aitel Date: October 18, 2002 Because the default SPIKE 2.7 run has been able to discover this vulnerability, and various people have contacted me regarding it, I offer this analysi...

CVE-2002-1140

The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...

CVE-2002-0863

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (1)

// source: https://www.securityfocus.com/bid/5927/info The Winlogon NetDDE Agent can be leveraged to allow local privilege escalation. This is related to the Microsoft Windows Window Message Subsystem Design Error Vulnerability BID 5408. A local user can use a WMCOPYDATA message to send arbitrary...

IIS 5.0 Cross Site Scripting vulnerability

SYSTEMS AFFECTED ======== IIS 5.0 / Windows 2000 SP2 - SRP1 exploited with a browser CONTENTS ========= Subject: IIS 5.0 Cross Site Scripting Vulnerability Date: 27 September 2002 Risk: Medium DESCRIPTION ========= IIS 5.0 can be forced to return malicious content in user's browser. By using a...

CVE-2002-0967

Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long "ed2k:" URL...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000

Title: Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000 Author: ZARAZA Affected: Microsoft Windows NT 4.0 buffer overflow Microsoft Windows 2000 DoS Vendor: Microsoft Risk: Average for Windows NT 4.0 Low for Windows 2000 Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I...

EUVD-2002-0855

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

CVE-2002-0863

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."...

Microsoft PPTP Server and Client remote vulnerability

phion Security Advisory 26/09/2002 Microsoft PPTP Server and Client remote vulnerability Summary ----------------------------- The Microsoft PPTP Service shipping with Windows 2000 and XP contains a remotely exploitable pre-authentication bufferoverflow. Affected Systems...

Microsoft Windows 2000 Indexing Service permits read access to files outside web root via crafted request

Overview A vulnerability exists in the way that Index Server 2.0 and the Indexing Service for Windows 2000 handles search requests. This vulnerability may alllow attackers to view the contents of "include" files located on the web server. Description By submitting a specific search request to a...