CVE-2001-0542

CVE-2001-0542 describes buffer/format-string vulnerabilities in Microsoft SQL Server 7.0 and 2000. The issues affect the built-in formatting functions raiserror, formatmessage, and xp_sprintf, allowing an attacker with SQL Server access to execute arbitrary code or potentially cause a denial of s...

EasyBoard 2000 Remote Buffer Overflow Vulnerability

EasyBoard 2000 Remote Buffer Overflow Vulnerability Jin Ho You, [email protected] 1 Discussion EasyBoard 2000http://ezboard.new21.org is a web board CGI. Improperly manipulated user-supplied input to the Content-Type header can create an buffer overflow condition. This vulnerability...

EZNE.NET Ezboard 2000 - Remote Buffer Overflow

EZNE.NET Ezboard 2000 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/4068/info Ezboard 2000 is a web based bulletin board system. It is available for Linux systems. A vulnerability has been reported in some versions of Ezboard. In some CGI programs, user supplied data is writt...

EZNE.NET Ezboard 2000 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4068/info Ezboard 2000 is a web based bulletin board system. It is available for Linux systems. A vulnerability has been reported in some versions of Ezboard. In some CGI programs, user supplied data is written to a staticly sized array with a sprintf cal...

Слабые разрешения реестра в Microsoft Exchange 2000 (weak permissions)

Группе Everyone разрешение на доступ к разделу WinReg, что позволяет подключаться к реестру удаленно...

Security Bulletin MS02-004

---------------------------------------------------------------------- Title: Unchecked Buffer in Telnet Server Could Lead to Arbitrary Code Execution Date: 07 February 2002 Software: Telnet Service in Microsoft Windows 2000; Telnet Daemon in Microsoft Interix 2.2 Impact: Denial of Service;...

Oracle 9iAS mod_plsql DAD Admin Interface Access

In a default installation of Oracle 9iAS, it is possible to access the modplsql DAD Admin interface. Access to these pages should be restricted. %NASLMINLEVEL 70300 This script was written by Matt Moore Script audit and contributions from Carmichael Security Erik Anderson Added link to the Bugtra...

KPMG-2002004: Lotus Domino Webserver DOS-device Denial of Service

-------------------------------------------------------------------- -=Lotus Domino Webserver DOS-device Denial of Service=- courtesy of KMPG Denmark BUG-ID: 2002004 Released: 4th Feb 2002 -------------------------------------------------------------------- Problem: ======== The Domino Webserver...

Vulnerability in Black ICE Defender

The current version of BlackICE Defender 2.9.caq and 2.9.cap running on a Windows 2000 machine can be remotely crashed using a very basic ping flood. This has been tested with Divine Intervention 2 & 3, Sisoft Sandra Network LAN benchmark. Setting the packet size to about 10,000 bytes causes a Bl...

Security Bulletin MS02-001

Title: Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data Date: 30 January 2002 Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Max Risk: Moderate Bulletin: MS02-001 Microsoft encourages customers to review the Security Bulletin at:...

DoS против Windows 2000/NT (stream3 flood)

Флуд из FIN+ACK TCP пакетов приводит к утечке памяти в ядре...

SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446)

Dear, Some of you may be interested in information about Microsoft Q280446 issue patch included into SP2. Just to throw the light on it we've decided to publish information because Microsoft declared the deadline for official Windows NT 4.0 support. Topic: Windows NT/2000 DoS via stream3 flood...

Internet Explorer Pop-Up OBJECT Tag Bug

Internet Explorer Pop-Up OBJECT Tag Bug Class: Failure to Handle Exceptional Conditions Remote: Yes Local: Yes Found: January 10, 2001 Severity: Moderate Vulnerable: IE 6.0.2600.0000 + Windows 2000 Update Versions: Q312461; Q240308;Q313675 Discussion: The PopUp object allows the insertion of...

Sambar Webserver v5.1 DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sambar Webserver v5.1 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 16, 2002 Product / Vendor: Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. http://www.sambar.com Summary: Sambar Webserver i...

BlackMoon FTPd Buffer Overflow Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= BlackMoon FTPd Buffer Overflow Vulnerability =- Release date: Tuesday, January 15, 2002 Introduction: BlackMoon is a native windows2000 and XP FTP server application with features such as virtual directories, user accounts, file resuming an...

Pi3Web Webserver v2.0 Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability Type: DoS, crashes Daemon Release Date: January 14, 2002 Product / Vendor: Pi3Web is a free, multithreaded, highly configurable and extensible HTTP server and development environment for cross platfo...

Web Server 4D/eCommerce 3.5.3 DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 15, 2002 Product / Vendor: Web Server 4D/eCommerce is a single application that includes a shopping cart, credit card authorization, and order tracking - ...

Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability Type: Directory Traversal Release Date: December 15, 2002 Product / Vendor: Web Server 4D/eCommerce is a single application that includes a shopping cart, credit card authorization, and...

Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability Type: File Disclosure Release Date: January 10, 2002 Product / Vendor: Eserv Mail, News, Web, FTP and Proxy Servers for Win95/98/NT/2000 http://www.eserv.ru Summary: The...

Savant Webserver Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Savant Webserver Buffer Overflow Vulnerability Type: DoS, crashes Daemon Release Date: January 5, 2002 Product / Vendor: Savant is a freeware open source web server that runs on Windows 95, 98, ME, NT, and 2000, turning any desktop computer into a...