CVE-2000-0701

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges...

CVE-2000-0756: Undefined Security Weakness

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

CVE-2000-0710: Undefined Security Weakness

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name...

CVE-2000-0709: Undefined Security Weakness

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name...

CVE-2000-0680: Undefined Security Weakness

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...

Security Bulletin (MS00-067)

Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...

@stake Advisory: NTLM Replaying via Windows 2000 Telnet Client (A 091400-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I wish this could have gone out sooner but there was an issue with the initial Microsoft patch which we found during our testing. They subsequently decided to fix the patch which delayed things a bit. We feel that if a vendor is taking an issue...

Win2k Telnet.exe malicious server vulnerability

/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...

vCard DoS on Outlook 2000

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability in vCard import in Outlook 2000 Released: August 30, 2000 Summary ======= Under certain conditions, excessively long or malformed fields in a vCard .vcf file can cause Microsoft Outlook 2000 to either overflow or excessively utilize syst...

Win2k Telnet.exe malicious server vulnerability

Microsoft was informed of this problem with exploit over a month ago. I received some token responses right after emailing them, but have heard nothing since. If they have released an advisory of their own yet, I have not seen it. I informed them up-front that I would release a full-disclosure...

Security Bulletin (MS00-066)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-066 ====================================== Patch...

DoS Windows 2000 через RPC

Некорректный RPC-пакет приводит к отказу сервера...

EFTP Newline String Handling Remote DoS

The version of EFTP running on the remote host has a denial of service vulnerability. Sending data without a trailing carriage return causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10510; scriptversion"1.36";...

msw2ktelnetdos.sh

Microsoft Windows 2000 Telnet Server DoS Vulnerability Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled, numerous attacks will cause the...

Локальная дырка в Windows 2000 - переполнение буфера в Still Image Service

Переполнение буфре в сервисе позволяет выполнение кода с привилегией Local System...

@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)

@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...

Security Bulletin (MS00-065)

Microsoft Security Bulletin MS00-065 - ---------------------------------------- Patch Available for "Still Image Service Privilege Escalation" Vulnerability Originally posted: September 6, 2000 ==================================== Summary ======= Microsoft has released a patch that eliminates a...

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by...

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation

source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by default. This is due to an unchecked buffer in one of the methods by whic...

"Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000

4 сентября 2000 г. Пресс Релиз "Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000 "Лаборатория Касперского", российский лидер в области разработки антивирусных систем безопасности, сообщает об обнаружении вируса W2K.Stream - нового поколения вредоносных...