8753 matches found
Security Bulletin (MS00-052)
Microsoft Security Bulletin MS00-052 - -------------------------------------- Patch Available for "Relative Shell Path" Vulnerability Originally posted: July 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0 and Windowsr...
Microsoft Windows Server 2000 - Named Pipes Predictability
source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...
Microsoft Windows Server 2000 - Named Pipes Predictability
Microsoft Windows Server 2000 - Named Pipes Predictability source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBoo...
Дырка в Excel 2000
С помощью функции REGISTER.ID можно выполнить любую функцию любой динамической библиотеки...
CVE-2000-0664
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack that uses the %2E URL encoding for the dots...
CVE-2000-0658
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol...
CVE-2000-0656
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol...
CVE-2000-0657
Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol...
DoS против telnet в Windows 2000
Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...
Security Bulletin (MS00-050)
Microsoft Security Bulletin MS00-050 - -------------------------------------- Patch Available for "Telnet Server Flooding" Vulnerability Originally Posted: July 24, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Telnet Server that ships as part...
CVE-2000-0645
WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...
CVE-2000-0671
Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character %00 to the URL...
Fixed in Apache Tomcat 3.2
Low: Information disclosure CVE-2000-0759 Requesting a JSP that does not exist results in an error page that includes the full file system page of the current context. Affects: 3.1 Important: Information disclosure CVE-2000-0672 Access to the admin context is not protected. This context allows an...
CVE-2000-0624
Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long EXTINF: extension in the M3U playlist...
CVE-2000-0621
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability...
CVE-2000-0572
CVE-2000-0572 affects the Razor configuration management tool. The root cause is weak encryption of the password file, enabling local users to gain privileges. CVSS v2 base score 4.6 (Medium); attack vector LOCAL, attack complexity LOW, authentication NONE, with partial impact to confidentiality,...
CVE-2000-0606
The CVE describes a buffer overflow in the kon program within Kanji on Console (KON) on Linux. The vulnerability is triggered by a long -StartupMessage parameter in KON, potentially allowing local users to gain root privileges. No versions, affected distributions, or explicit exploit details are ...
CVE-2000-0609
NetWin dMailWeb and cwMail (≤2.6g) are susceptible to a denial-of-service triggered by a long username parameter, causing partial availability impact. The documents provide no detailed root-cause, exploit, official remediation, or patch information beyond the version range. No further technical s...
CVE-2000-0617
The CVE-2000-0617 issue is a buffer overflow in the xconq and cconq game programs on Red Hat Linux that allows local privilege escalation via a long USER environment variable. The connected documents confirm the vulnerable components (xconq/cconq) and the root cause (buffer overflow triggered by ...
