7988 matches found
Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection
By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...
[SECURITY] New versions of Boa packages available
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 9, 2000 - ---------------------------------------------------------------------------- Package: boa Vulnerability:...
CVE-2000-0816
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters...
Linux news 6.10.00
Ваш билет до Windows 2000 Примечательное начало: как бы вы ни относились к Microsoft, трудно отрицать, что Windows 2000 Professional - это на сегодня самая стабильная и мощная версия Windows. Если вы были бы рады избавиться от изъянов и ограничений Windows 95 или 98, но не собираетесь в ближайшее...
Многочисленные дырки в LPC Windows 2000/NT
Возможны несколько DoS атак, кроме того, можно подменить LPC-запрос получив доступ к контексту локальной машины...
Various security vulnerabilities with LPC ports
BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin [email protected] Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP...
@stake Advisory: Unauthorized "Directory Listings" under IIS 5.0 (A100400-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Unauthorized "Directory Listings" under IIS 5.0 Release Date: 10/04/2000 Application: Internet Information Server 5.0 Platform: Windows 2000 Severity: An attacker can enumerate files in...
bindview.lpc.txt
BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP6a Window 2000 up to and...
Cisco PIX Firewall Mailguard Feature SMTP Content Filter Bypass
The remote SMTP server seems to be protected by a content filtering firewall probably Cisco's PIX. However, an attacker may bypass this content filtering by issuing a DATA command before a MAIL command, that allows him to directly communicate with the real SMTP daemon. C Tenable Network Security,...
MS00-070: LPC and LPC Ports Vulnerabilities patch (266433)
The hotfix for the 'Multiple LPC and LPC Ports Vulnerabilities' has not been applied on the remote Windows host. These vulnerabilities allow an attacker gain privileges on the remote host, or to crash it remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10525;...
Microsoft Windows NT 4.0/2000 Predictable LPC Message Identifier - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The structure of a messag...
Microsoft Windows NT 4.0/2000 - Spoofed LPC Request (MS00-003)
source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by Bindview. The patch released by Microsoft...
CVE-2000-1207
userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LCALL environment variables CVE-2000-0844...
CVE-2000-0354
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...
Malformed Embedded Windows Media Player 7 "OCX Attachment" Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Malformed Embedded Windows Media Player 7 "OCX Attachment" Vulnerability USSR Advisory Code: USSR-2000053 Public Disclosure Date: September 26, 2000 Vendors Affected: Microsoft Corporation http://www.microsoft.com Systems Affected: Outlook 2000...
IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files
Georgi Guninski security advisory 22, 2000 IE 5.5/Outlook Express security vulnerability - GetObject expose user's files Systems affected: IE 5.5, Outlook Express,probably Outlook - Win98/2000. Probably other versions - have not tested. Risk: High Date: 26 September 2000 Legal Notice: This Adviso...
Extent RBS directory Transversal.
Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...
CVE-2000-0724
The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...