CVE-2001-1515

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended...

CVE-2001-1518

RunAs runas.exe in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service RunAs hang by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the...

CVE-2001-1517

RunAs runas.exe in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying tha...

CVE-2001-1519

RunAs runas.exe in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

CVE-2001-1560

Win32k.sys aka Graphics Device Interface GDI in Windows 2000 and XP allows local users to cause a denial of service system crash by calling the ShowWindow function after receiving a WMNCCREATE message...

PT-2001-2602 · Microsoft · Windows 2000 +1

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue concerns the storage of cleartext authentication information in memory by RunAs runas.exe in Windows 2000. This could potentially allow attackers to obtain usernames and passwords by executing a process...

PT-2001-2604 · Microsoft · Windows 2000

Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to create a spoofed named pipe when the RunAs service is stopped, then capture cleartext usernames and passwords when clients connect to the service. The vendor disputes this issue, sayin...

PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...

CVE-2001-0879

Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service...

Microsoft Windows Server 2000 - RunAs Service Denial of Service

Microsoft Windows Server 2000 - RunAs Service Denial of Service // source: https://www.securityfocus.com/bid/3291/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an...

Microsoft Windows Server 2000 - RunAs Service Named Pipe Hijacking

Microsoft Windows Server 2000 - RunAs Service Named Pipe Hijacking // source: https://www.securityfocus.com/bid/3185/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 1 // source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...

Microsoft Windows Server 2000 - RunAs Service Named Pipe Hijacking

// source: https://www.securityfocus.com/bid/3185/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an icon, then selecting 'Run as...' from the context menu. When the...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)

// source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec...

Microsoft Windows Server 2000 - RunAs Service Denial of Service

// source: https://www.securityfocus.com/bid/3291/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an icon, then selecting 'Run as...' from the context menu. When the...

Denicomp Winsock RSHD/NT Standard Error 2.21.00 - Denial of Service

// source: https://www.securityfocus.com/bid/3659/info Winsock RSHD/NT is a Remote Shell Daemon for Windows NT and Windows 2000. It uses the standard Unix rsh and rcp commands. rsh ie "remote shell" allows the execution of a non-interactive program on another system running the server component,...

DoS против Windows 2000 при исопльзовании IPSec (IKE flood)

Большое количество IKE-пакетов UDPприводит к 99 потреблению процессорного времени...

CVE-2001-0951

Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)

Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service 2 source: https://www.securityfocus.com/bid/3652/info Internet Protocol Security IPSec provides authentication and encryption for IP network traffic. The Internet Key Exchange IKE protocol is a management protocol standard...