7988 matches found
CVE-2000-0757
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed...
@stake Advisory: NTLM Replaying via Windows 2000 Telnet Client (A 091400-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I wish this could have gone out sooner but there was an issue with the initial Microsoft patch which we found during our testing. They subsequently decided to fix the patch which delayed things a bit. We feel that if a vendor is taking an issue...
Security Bulletin (MS00-067)
Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...
vCard DoS on Outlook 2000
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability in vCard import in Outlook 2000 Released: August 30, 2000 Summary ======= Under certain conditions, excessively long or malformed fields in a vCard .vcf file can cause Microsoft Outlook 2000 to either overflow or excessively utilize syst...
Win2k Telnet.exe malicious server vulnerability
Microsoft was informed of this problem with exploit over a month ago. I received some token responses right after emailing them, but have heard nothing since. If they have released an advisory of their own yet, I have not seen it. I informed them up-front that I would release a full-disclosure...
Win2k Telnet.exe malicious server vulnerability
/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...
DoS Windows 2000 через RPC
Некорректный RPC-пакет приводит к отказу сервера...
Security Bulletin (MS00-066)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-066 ====================================== Patch...
EFTP Newline String Handling Remote DoS
The version of EFTP running on the remote host has a denial of service vulnerability. Sending data without a trailing carriage return causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10510; scriptversion"1.36";...
Security Bulletin (MS00-065)
Microsoft Security Bulletin MS00-065 - ---------------------------------------- Patch Available for "Still Image Service Privilege Escalation" Vulnerability Originally posted: September 6, 2000 ==================================== Summary ======= Microsoft has released a patch that eliminates a...
@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)
@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...
msw2ktelnetdos.sh
Microsoft Windows 2000 Telnet Server DoS Vulnerability Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled, numerous attacks will cause the...
Локальная дырка в Windows 2000 - переполнение буфера в Still Image Service
Переполнение буфре в сервисе позволяет выполнение кода с привилегией Local System...
Microsoft Windows Server 2000 - Still Image Service Privilege Escalation
Microsoft Windows Server 2000 - Still Image Service Privilege Escalation source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by...
Microsoft Windows Server 2000 - Still Image Service Privilege Escalation
source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by default. This is due to an unchecked buffer in one of the methods by whic...
"Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000
4 сентября 2000 г. Пресс Релиз "Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000 "Лаборатория Касперского", российский лидер в области разработки антивирусных систем безопасности, сообщает об обнаружении вируса W2K.Stream - нового поколения вредоносных...
Новое поколение вирусов под Windows 2000
Новый вирус Stream использует альтернативные потоки данных NTFS, позволяющие придавать файлам новые атрибуты, для хранения тела зараженного файла, что усложняет процесс лечения вируса...
lock workstation vulnerability in win2000 pro running Netwareclient
I have discovered what appears to be a security flaw in Windows 2000 Pro SP1 machines running Novell's Client 4.71.20000313. I have no way to verify whether or not this extends to other versions. An Example to illustrate: The win 2000 pro workstation is a member of the domain. The user is logged...
MS00-062: Local Security Policy Corruption (269609)
The hotfix for the 'Local Security Policy Corruption' problem has not been applied. This vulnerability allows a malicious user to corrupt parts of a Windows 2000 system's local security policy, which could prevent this host from communicating with other hosts in this domain. C Tenable Network...