8781 matches found
CVE-2000-1036
Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. dot dot attack on the Image parameter...
CVE-2000-1056
CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...
CVE-2000-1034: Undefined Security Weakness
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...
DoS by SMTP AUTH command in IPSwitch IMail server
Dear folks, I found a kind of DoS to handle SMTP AUTH command in IPSwitch IMail server version 6.0.5. IPSwitch ships a product titled IMail, an email server for usage on NT servers serving SMTP, POP3, IMAP4, LDAP etc. It supports SMTP AUTH commands RFC2554 and several authenticate methods to...
Security Bulletin MS00-096
====================================================================== Issue: Wrong permissions on SNMP registry key Date: 06 December 2000 Affected Software: Windows 2000 Impact: Usurp management privileges on SNMP devices Bulletin ID: MS00-096 Bulletin:...
Security Advisory(CSA-200011)
CHINANSL Security AdvisoryCSA-200011 Topic: PHP AND APACHE Vulnerability Release Dateёє Dec 6, 2000 Affected system: ============ APACHE WEB SERVER 1.3 ЎЎЎЎ- Microsoft Windows NT 4.0 ЎЎЎЎ- Microsoft Windows 2000 Impact: ====== CHINANSL security team has found a security problem in Apache web serv...
Security Bulletin (MS00-094)
-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...
@stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1)
@stake, Inc. www.atstake.com Security Advisory Advisory Name: IIS 4.0/5.0 Phone Book server buffer overrun Release Date: 12/04/2000 Application: Microsoft's Phone Book Server on IIS 4.0, 5.0 Platform: Windows NT 4.0, Windows 2000 Severity: A buffer overflow conditions exists in pbserver.dll that...
[CORE SDI ADVISORY] MS Windows NT4 and Windows 2000 Phonebook Service overflow
CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft PhoneBook Server overflow Date Published: December 4th, 2000 Advisory ID: CORE-20001204 Bugtraq ID: 2048 CVE CAN: None currently assigned. Title: Microsoft PhoneBook Server buffer overflow Class: Boundary condition error Remotely...
UDP Ping-pong in Win2k
Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...
UDP-шторм в Windows 2000 (Kerberos 5 UDP storm)
Windows 2000 отвечает на любые пакеты в UDP-порт 464 Kerberos v5, что позволяет устроить UDP-шторм в сети...
MS00-094 Microsoft IIS Phone Book Service Overflow
This is an exploit for the Phone Book Service /pbserver/pbserver.dll described in MS00-094. By sending an overly long URL argument for phone book updates, it is possible to overwrite the stack. This module has only been tested against Windows 2000 SP1. Module Options msf use...
DoS против сервиса telnet в Windows 2000
Windows 2000 Professional разрешает лишь одно telnet-соединение. При этом, несмотря на timeout в процедуре авторизации, висящий неавторизованый пользователь не будет принудительно отключен...
Security Bulletin MS00-092
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------ Issue: Buffer overrun...
Windows 2000 Telnet Service DoS
Below is the original message sent to Microsoft, and since apparently 'Disclosure Procedures' are once again in focus... 11/08/2000 - Issue is reported to Microsoft's Security Response Team [email protected] 11/10/2000 - Microsoft confirmed receipt 11/21/2000 - Microsoft responded that they...
CVE-2000-1065
CVE-2000-1065 concerns the IP implementation of HP JetDirect printer card firmware (versions up to x.08.20 and earlier). The vulnerability allows remote attackers to cause a denial of service (printer crash) by sending a malformed packet. The connected documents confirm affected product (HP JetDi...
CVE-2000-0997
CVE-2000-0997 describes a format-string vulnerability in the eeprom program used by OpenBSD and NetBSD (and possibly others), allowing a local attacker to gain root privileges. The root cause is a format-string flaw in the eeprom utility, enabling privilege escalation on affected systems. A patch...
CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...