7988 matches found
CVE-2000-0867
Kernel logging daemon klogd in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
CVE-2000-0863
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges...
CVE-2000-0854
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document...
CVE-2000-0844
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen...
guninski27.txt
Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...
Еще одна дырка в Inexing Service из Windows 2000 (ixsso.query ActiveX)
При включенной службе Indexing Service ActiveX-компанент разрешенный для использования через Web позволяет провести поиск по локальным файлам...
IE 5.x Win2000 Indexing service vulnerability
Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...
Microsoft Indexing Service (Windows 2000) - File Verification
Microsoft Indexing Service Windows 2000 - File Verification Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not...
Microsoft Indexing Service (Windows 2000) - File Verification
Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it without...
Security Bulletin (MS00-084)
Microsoft Security Bulletin MS00-084 - -------------------------------------- Patch Available for "Indexing Services Cross Site Scripting" Vulnerability Originally posted: November 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr...
Дырки в Network Monitor Windows NT/2000
Переполнение буфера в фильтре разбирающем HTTP...
Security Bulletin (MS00-085)
Microsoft Security Bulletin MS00-085 - -------------------------------------- Patch Available for "ActiveX Parameter Validation" Vulnerability Originally posted: November 2, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. Th...
ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
Security Bulletin (MS00-083)
Microsoft Security Bulletin MS00-083 - -------------------------------------- Patch Available for "Netmon Protocol Parsing" Vulnerability Originally posted: November 01, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr and...
IIS 5.0 cross site scripting vulnerability - using .htw
Georgi Guninski security advisory 26, 2000 IIS 5.0 cross site scripting vulnerability - using .htw Systems affected: IIS 5.0/Windows 2000. Exploited with browser IE,NC but the problem is in the web server. Risk: Medium Date: 28 October 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi...
Microsoft Indexing Service (Windows 2000NT 4.0) - .htw Cross-Site Scripting
Microsoft Indexing Service Windows 2000NT 4.0 - .htw Cross-Site Scripting source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly...
Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting
source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...