CVE-2000-0830

Summary: CVE-2000-0830 affects annclist.exe in webTV for Windows. A remote attacker can cause a denial of service by sending a large, malformed UDP packet to ports 22701–22705. The sources consistently describe the affected component as annclist.exe running under webTV for Windows, with the vulne...

CVE-2000-0825

Ipswitch Imail 6.0 is affected by a denial-of-service vulnerability where a large number of concurrent connections with a long Host header can cause a thread to crash. This CVE (CVE-2000-0825) is described in multiple sources (NVD, CVE List) as enabling remote attacks that disrupt service, but th...

CVE-2000-0298

CVE-2000-0298 concerns Windows 2000 unattended installations using the OEMPreinstall option. The provided sources state that this setup creates insecure permissions on the All Users and Default Users directories, enabling potential local compromise with complete confidentiality, integrity, and av...

CVE-2000-0790

The CVE-2000-0790 entry describes a local-in-the-IE5.5/Windows 98 scenario where modifying Folder.htt and invoking the default execute option via the ShellDefView ActiveX control could cause Trojan horses to be run for the first listed file. No explicit affected versions beyond IE 5.5 on Windows ...

CVE-2000-0324

CVE-2000-0324 affects pcAnywhere 8.x and 9.0. The vulnerability allows remote attackers to cause a denial of service by sending a TCP SYN scan (e.g., via nmap). The provided documents state the impact as DoS but do not include specifics on root cause internals, affected versions beyond 8.x/9.0, o...

CVE-2000-0740

CVE-2000-0740 describes a buffer overflow in the Net Tools PKI Server 1.0 strong.exe web server (HTTPS) that, when processing a long URL, can allow a remote attacker to execute arbitrary commands. The vulnerability is in the web server component and affects the HTTPS port; the issue is exploitabl...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

CVE-2000-1101

The CVE-2000-1101 entry describes a directory traversal vulnerability in Winsock FTPd (WFTPD) versions 3.00 and 2.41 when the “Restrict to home directory” option is enabled. The flaw allows local users to escape the home directory by crafting a "/../" sequence, a variant of the dot-dot attack. Th...

CVE-2001-0543

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2000-0739

CVE-2000-0739 concerns the NAI Net Tools PKI Server 1.0. The vulnerability is a directory traversal in the strong.exe web server component that processes enrollment HTTPS requests, allowing a remote attacker to read arbitrary files via a .. path. The issue is present before HotFix 3. This is a re...

Vulnerability Details for MS02-012

On February 27 2002, Microsoft released a patch for a denial of service vulnerability in the Windows 2000 SMTP component. This vulnerability was reported to them in November 2001 though Security Focus's vuln-help list. This bug affects all Windows 2000 systems running the SMTP service that have n...

CVE-2002-0020

Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options...

CVE-2002-0054

SMTP service in 1 Microsoft Windows 2000 and 2 Internet Mail Connector IMC in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials...

CVE-2002-0055

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer BDAT request...

Windows 2000 system partition weak default permissions

Title: Windows 2000 system partition weak default permissions Affected: Windows 2000 Vendor: Microsoft Author: ZARAZA Date: August, 03 2002 Risk: High Exploitable: Yes Remote: No Vendor notified: May, 17 2002 SECURITY.NNOV URL: http://www.security.nnov.ru Advanced info:...

SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Essentia Web Server Directory Traversal Vulnerability Type: Directory Traversal Release Date: February 22, 2002 Product / Vendor: The Essentia Web Server provides Enhanced Web Application and Communication Services. Whether you are setting up a simple...

CVE-2002-0056

CVE-2002-0056 concerns Microsoft SQL Server 7.0 and 2000, where a buffer overflow is triggered by a long OLE DB provider name used with OpenDataSource or OpenRowset in an ad hoc connection. The resulting issue can allow an attacker to execute arbitrary code with the SQL Server service account’s p...

Подключение под чужим SID между доменами Windows 2000 (privelege escalation)

При вход пользователя из доверяемого домена доверяющий домен не проверяет принадлежность SID доверяющему домену. Это позволяет использовать SID пользователя другого домена...

Windows 2000 SIDHistory Escalation Attack

Russ, I know that this topic was brought up a few weeks ago, but we have been doing some research internally on this issue and have reached some disturbing conclusions. First of all, when Microsoft introduced the Windows 2000 domains within a forest structure, the domains were introduced as...

Netwin Webnews Buffer Overflow Vulnerability (#NISR18022002)

NGSSoftware Insight Security Research Advisory Name: Netwin Webnews.exe Systems Affected: IIS4 & IIS5 on Windows NT/2000 Severity: High Risk Vendor URL: http://www.netwinsite.com Author: Mark Litchfield [email protected] Date: 18th February 2002 Advisory number: NISR18022002 Advisory URL:...