7997 matches found
CVE-2001-0241
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0...
Неавторизованный доступ через SSL к LDAP в Windows 2000 (unauthorized access)
При разрешенном доступе к LDAP через SSL можно получить неавторизованный доступ к ряду функций LDAP, включая смену пароля...
Security Bulletin MS01-036
---------------------------------------------------------------------- Title: Function Exposed via LDAP over SSL Could Enable Passwords to be Changed Date: 25 June 2001 Software: Windows 2000 Impact: Privilege Elevation Bulletin: MS01-036 Microsoft encourages customers to review the Security...
Security Bulletin MS00-077 (version 2.0)
---------------------------------------------------------------------- Title: Patch Available for "NetMeeting Desktop Sharing" Vulnerability Released: 13 October 2000 Revised: 21 June 2001 version 2.0 Software: Netmeeting Impact: Denial of service Bulletin: MS00-077 Microsoft encourages customers...
1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure
1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/2902/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of...
1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/2902/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the components of this package, 'tradecli.dll', allows use...
Advisory CA-2001-13
CERT Advisory CA-2001-13 Buffer Overflow In IIS Indexing Service DLL Original release date: June 19, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft Windows NT 4.0 with IIS 4.0 or IIS 5.0 enabled Systems...
All versions of Microsoft Internet Information Services, Remote buffer overflow (SYSTEM Level Access)
All versions of Microsoft Internet Information Services, Remote buffer overflow SYSTEM Level Access Release Date: June 18, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Informatio...
Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters
Overview A vulnerability exists in the Indexing services used by Microsoft IIS 4.0 and IIS 5.0 running on Windows NT, Windows 2000, and beta versions of Windows XP. Exploitations of this vulnerability allows a remote intruder to run arbitrary code on the victim machine. Description There is a...
CVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...
CVE-2001-0382
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...
Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (PoC)
// source: https://www.securityfocus.com/bid/2880/info Windows Index Server ships with Windows NT 4.0 Option Pack; Windows Indexing Service ships with Windows 2000. An unchecked buffer resides in the 'idq.dll' ISAPI extension associated with each service. A maliciously crafted request could allow...
Проблемы с telnet-сервисом Windows 2000 (predictable named pipes)
telnet service подключается к существующей named pipe без проверки каким приложением она открыта...
Microsoft Windows 2000 Telnet server vulnerability
RAZOR Advisory: Range checking fault condition in Microsoft Windows 2000 Telnet server Issue Date: June 8, 2001 Contact: Michal Zalewski [email protected] Topic: Range checking fault condition is present in telnet server shipped with Microsoft Windows 2000. Affected Systems: Tested on...
Security Bulletin MS01-030
Title: Incorrect Attachment Handling in Exchange 2000 OWA Can Execute Script Date: 06 June 2001 Software: Microsoft Exchange 2000 Server Outlook Web Access Impact: Run code of attacker's choice Bulletin: MS01-030 Microsoft encourages customers to review the Security Bulletin at:...
Выполнение javascript в Exchange 2000 OWA (javascript execution)
javascript содержащийся во вложенном файле может быть выполнен в контексте сервера...
Microsoft Windows Server 2000 - Telnet Username Denial of Service
Microsoft Windows Server 2000 - Telnet Username Denial of Service source: https://www.securityfocus.com/bid/2838/info Due to a flaw in the implementation of the telnet service, it is possible for a remote client to perform a denial of service attack against a host. If approximately 4300 character...
alt3kx-advisories-2001.txt
====================================================================== QVT/NET 4.3 FTP server Directory Traversal Author: alt3kx! Date: 2001-05-22 Site: www.raza-mexicana.org Greet to: 0x90, drfdisk^, Dex, PaTa Teams: Raregazz - X-ploit and S0d vicente F0x no rulas wey!...