CVE-2000-0828

Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter...

CVE-2000-0867

Kernel logging daemon klogd in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages...

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

CVE-2000-0827

Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username...

guninski27.txt

Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...

Еще одна дырка в Inexing Service из Windows 2000 (ixsso.query ActiveX)

При включенной службе Indexing Service ActiveX-компанент разрешенный для использования через Web позволяет провести поиск по локальным файлам...

IE 5.x Win2000 Indexing service vulnerability

Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...

Microsoft Indexing Service (Windows 2000) - File Verification

Microsoft Indexing Service Windows 2000 - File Verification Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not...

Microsoft Indexing Service (Windows 2000) - File Verification

Demo - IE 5.x Win2000 Indexing service vulnerability Demo - IE 5.x Win2000 Indexing service vulnerability Legal Notice: This Advisory and Demonstration is Copyright c 2000 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it without...

Security Bulletin (MS00-084)

Microsoft Security Bulletin MS00-084 - -------------------------------------- Patch Available for "Indexing Services Cross Site Scripting" Vulnerability Originally posted: November 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr...

Security Bulletin (MS00-085)

Microsoft Security Bulletin MS00-085 - -------------------------------------- Patch Available for "ActiveX Parameter Validation" Vulnerability Originally posted: November 2, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. Th...

Дырки в Network Monitor Windows NT/2000

Переполнение буфера в фильтре разбирающем HTTP...

ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

Security Bulletin (MS00-083)

Microsoft Security Bulletin MS00-083 - -------------------------------------- Patch Available for "Netmon Protocol Parsing" Vulnerability Originally posted: November 01, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr and...

IIS 5.0 cross site scripting vulnerability - using .htw

Georgi Guninski security advisory 26, 2000 IIS 5.0 cross site scripting vulnerability - using .htw Systems affected: IIS 5.0/Windows 2000. Exploited with browser IE,NC but the problem is in the web server. Risk: Medium Date: 28 October 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi...

Microsoft Indexing Service (Windows 2000NT 4.0) - .htw Cross-Site Scripting

Microsoft Indexing Service Windows 2000NT 4.0 - .htw Cross-Site Scripting source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly...

Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting

source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...

CVE-2000-0790

The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file...

CVE-2000-0761

OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...