7997 matches found
Webtraversal in PCI Netsupport Manager (all version up to 7 using web extensions)
It is possible to view and download files on machines running PCI Netsupport Manager all version up to 7 that have the web extensions switched on default port 80. This has only been tested on Windows NT 4 server and workstation and Windows 2000 Pro , Server and Advanced server. Example on a...
KPMG-2002005: BitVise WinSSH Denial of Service
-------------------------------------------------------------------- -=BitVise WinSSH Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002005 Released: 18th Mar 2002 -------------------------------------------------------------------- Problem: ======== Using "ill-intended connection attempts...
Many, many, many Sql Server 7 & 2000 Buffer Overflows
Security Advisory Name : Many, many, many Sql Server 7 & 2000 Buffer Overflows System Affected : Sql Server 7 & 2000 all service packs and fixes. Severity : High. Remote Exploit: Yes Author: Cesar Cerrudo. Date: 03/12/2002 Advisory Number: CC030203 Description : Well people it's the same old...
DoS in SurfControl's EmailFilter
Just an FYI: I did communicate heavily with SurfControl on this before posting it here: On February 12, 2002, I contacted SurfControl concerning a denial of service condition in the EmailFilter Version 4.0. The DoS was successfully carried out on a Windows 2000 Professional SP2 box. On February 1...
CVE-2000-0027
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...
EUVD-2000-1096
Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...
CVE-2000-0830
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705...
CVE-2000-0776
Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request...
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...
CVE-2001-0860
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...
CVE-2000-0298
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...
CVE-1999-1358
Technical details about CVE-1999-1358 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2000-0839
Technical details about CVE-2000-0839 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, impact, and fixes.
CVE-2001-0659
CVE-2001-0659 describes a buffer overflow in the Windows 2000 IrDA driver (infrared data exchange). A malformed IrDA packet can be used by a physically proximate attacker to trigger a denial of service reboot. Technical details in connected sources identify the affected component as the IrDA driv...
CVE-2001-0540
CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...
CVE-2000-0593
WinProxy 2.0 and 2.0.1 are affected. A remote attacker can cause a denial of service by sending an HTTP GET request without specifying an HTTP version. This vulnerability is cataloged as CVE-2000-0593 with a NVD base score of 5.0 (Medium) and an availability impact of Partial. The available recor...
CVE-2000-0892
CVE-2000-0892 describes a vulnerability where some telnet clients may disclose environment variables to remote telnet servers or via telnet: URLs, due to RFC 1572 (NEW-ENVIRON). The underlying issue is the ability of a server to request environment variables before authentication, potentially exp...
CVE-2000-1195
The CVE-2000-1195 entry relates to the Linux netkit telnetd: remote authentication bypass when telnetd runs with the -L option in netkit-telnet-0.16 or earlier. Affected software: telnet daemon (telnetd) from the Linux netkit package prior to netkit-telnet-0.16. Root cause: telnetd allows bypassi...
CVE-2000-0619
The CVE-2000-0619 entry concerns Top Layer AppSwitch 2500, where remote attackers can cause a denial of service by sending malformed ICMP packets. Documents consistently describe the affected product and the impact (availability disruption) but do not provide exploit details, affected versions, o...