8781 matches found
Exchange Malformed MIME Header Handling DoS
The remote Exchange server seems to be vulnerable to a flaw that lets malformed MIME headers crash it. Nessus did not actually test for these flaws - it just relied on the banner to identify them. Therefore, this warning may be a false positive - especially since the banner DOES NOT CHANGE if the...
@stake Advisory: Windows 2000 .ASX Buffer Overrun (A112300-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: Windows 2000 .ASX Buffer Overrun Release Date: 11/23/2000 Application: Microsoft Windows Explorer with Microsoft Media Player v6.xx and Microsoft Media Player v7.xx. Platform: Windows 2000 S...
CVE-2000-1224
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as 1 "..", 2 "%2e..", 3 "%81", 4 "%82", and others...
Проблемы в Windows 2000 (Domain Account Lockout)
Политика блокировки учетных записей пользователя после неудачных попыток входа не срабатывает на машинах, которые не являются членами домена Windows 2000...
Security Bulletin (MS00-089)`
Microsoft Security Bulletin MS00-089 - -------------------------------------- Patch Available for "Domain Account Lockout" Vulnerability Originally posted: November 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. The...
CVE-2000-1217
Microsoft Windows 2000 before Service Pack 2 SP2, when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain...
CVE-2000-1223
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request...
RealServer /admin/includes/ Remote Memory Content Disclosure
The remote Real Server discloses the content of its memory when issued the request : GET /admin/includes/ This information may be used by an attacker to obtain administrative control on this server, or to gain more knowledge about it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script...
Security Bulletin (MS00-088)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-088 - -------------------------------------- Patch...
Серьезная дырка в Exchange 2000 (User Account)
При установке в системе создается локальная учетная запись пользователя с заранее определенным паролем. При установке на контроллер домена запись создается в домене...
CVE-2000-0809
Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service...
CVE-2000-0863
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges...
CVE-2000-0859
The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests...
CVE-2000-0856
Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request...
CVE-2000-0854
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document...
CVE-2000-0805
Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."...
CVE-2000-0844
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen...
CVE-2000-0874
Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...