8747 matches found
CVE-2000-0400
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post...
CVE-2000-0435
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...
Security Bulletin (MS00-034)
Microsoft Security Bulletin MS00-034 - -------------------------------------- Patch Available for "Office 2000 UA Control" Vulnerability Originally Posted: May 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Office 2000 and Office 200...
Microsoft Office 2000 Advisory
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...
Слабость EFS в Windows 2000
При использовании Encrypted File System в Windows 2000 возможно дешифрование файлов, т.к. локальная база данных безопасности хранится на диске. Для предотвращения этого необходимо использовать syskey с паролем или хранением ключа на дискете...
ISS SAVANT Advisory 00/26
Internet Security Systems SAVANT Windows 2000 Advisory No: 00/26 Dated: 10 May 2000 Platforms Affected: Windows 2000 Server Windows 2000 Professional Subject: Default configuration of SYSKEY permits compromise of Encrypting File System Summary: The Encrypting File System EFS permits files and...
stream3 flood attack
Topic: Windows NT/2000 DoS via stream3 flood attack Authors: Dark Zorro , Error Date: 2 December 2000 yes... it's old Vendor Informed: 2 December 2000 Software affected: Windows NT 4.0, Windows 2000 Risk: Low Remote: Yes Exploitable: Yes SECURITY.NNOV advisories:...
Gnapster Absolute Path Name Request Arbitrary File Access
An insecure Napster clone e.g. Gnapster or Knapster is running on the remote computer, which allows an intruder to read arbitrary files on this system, regardless of the shared status of the files. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10408; scriptversion...
CVE-2000-0416
NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0420
The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...
CVE-2000-0457
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces %20 and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability...
CVE-2000-0411
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the envreport parameter...
shtml.exe reveal local path of IIS web directory
I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...
CVE-2000-0382
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...
CVE-2000-0413
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path...
FrontPage 2000 IIS 4.05.0 - Server Extensions Full Path Disclosure
FrontPage 2000 IIS 4.05.0 - Server Extensions Full Path Disclosure source: https://www.securityfocus.com/bid/1174/info The local path of a HTML, HTM, ASP, or SHTML file can be disclosed in Microsoft IIS 4.0/5.0 / Frontpage Server Extensions 1.1 and prior. Passing a path to a non-existent file to...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...