CVE-2002-0725

NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...

CVE-2002-0725

CVE-2002-0725 affects NTFS on Windows NT 4.0 and Windows 2000. Local attackers can hide file usage by creating a hard link to the target file, causing the link to be recorded in the audit trail instead of the target. Root cause involves the NTFS auditing reporting hard links. Impact is local, wit...

Security Bulletin MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886)

---------------------------------------------------------------------- Title: Flaw in Network Connection Manager Could Enable Privilege Elevation Q326886 Date: 14 August 2002 Software: Microsoft Windows 2000 Impact: Privilege elevation Max Risk: Critical Bulletin: MS02-042 Microsoft encourages...

Windows 2000 Network Connection Manager privelege escalation

Callback function is called with system priveleges...

HelpMe2.pl

Winhlp32.exe Remote BufferOverrun exploit code. written by Gary O'leary-Steele Sec-1 Ltd. [email protected] For use as proof of concept Ammended for use with kernel32.dll version 5.0.2195.2778 Kernell32 jmp ebx 77E87793 $sploit = "\x55\x8b\xec\x8b\xc3". Fixed from previous version...

sql2kx2.txt

!/usr/local/bin/perl ----------------------------------------------------------- Exploit will create file '\scansql2kbo2.' SQL Server 2000 'Hello Bug' for Win2kSP2 by [email protected] & spoonfork Bug found by Dave Aitel http://online.securityfocus.com/archive/1/286311/2002-08-02/2002-08-08/...

CVE-2000-1209

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

CVE-2000-1208

Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...

CVE-2002-0645

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine MSDE 2000 may allow authenticated users to execute arbitrary commands...

Immunity Canvas: MSSQL_AUTH

Name| mssqlauth ---|--- CVE| CVE-2000-1209 Exploit Pack| CANVAS Description| MSSQL Null Auth Connect Notes| CVE Name: CVE-2000-1209 VENDOR: Microsoft OSVDB: http://www.osvdb.org/displayvuln.php?osvdbid=15757 Notes: Connect to a MSSQL server with auth or with null password and return a Shell Date...

CVE-2000-1209

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

CVE-2000-1209

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

SECURITY.NNOV: Windows 2000 system partition weak default permissions

Title: Windows 2000 system partition weak default permissions Affected: Windows 2000 Vendor: Microsoft Author: ZARAZA [email protected] Date: August, 03 2002 Risk: Average Exploitable: Yes Remote: No Vendor notified: few months ago SECURITY.NNOV URL: http://www.security.nnov.ru Advanced inf...

CVE-2000-1208

Format string vulnerability in startprinting function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote call...

CVE-2000-1208

CVE-2000-1208 affects BSD-based lpr/lpd (print subsystem). It is a format-string vulnerability in startprinting() inside printjob.c that can allow local privilege escalation via a faulty syslog call using strings from checkremote(). The vulnerability is tied to the lpr/lpd package and has been ad...

CVE-2000-1207

userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LCALL environment variables CVE-2000-0844...

CVE-2000-1207

CVE-2000-1207 affects the userhelper component in the Red Hat Linux usermode package. It executes non-setuid programs as root, which prevents glibc security measures from activating. This creates a local exposure where vulnerable programs can be exploited via format string weaknesses in glibc, tr...

CVE-2002-0443

Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords...

CVE-2002-0645

Technical details for CVE-2002-0645 are not publicly provided in the connected documents; the available sources reference the vulnerability at a high level. Monitor for updates from official advisories.

SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities.

Security Advisory Name: SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. System Affected : Sql Server 2000 all Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/25/2002 Advisory Number: CC070205 Overview: Database Consistency Checkers DBCCs are command console...