CVE-2003-1300

Affected: Baby FTP Server (BabyFTP) 1.2 and possibly earlier versions before May 31, 2003. Vulnerability: remote denial-of-service caused by a large number of connections from the same IP, which triggers an access violation. Root cause not explicitly stated in provided documents. Impact: denial o...

CVE-2003-1299

CVE-2003-1299 affects Baby FTP Server 1.2. A directory traversal flaw via the CWD command using triple dots (… ) enables remote authenticated users to list arbitrary directories and possibly read files. The description does not specify patches or fixed versions in the provided documents. Impact i...

CVE-2003-1298

CVE-2003-1298 : Affected software is AnyPortal(php) with the vulnerable file siteman.php3. The issue is directory traversal ("./.." traversal) that enables remote attackers to (1) create, (2) delete, (3) save, and (4) upload files by navigating to the root directory. This is described in the CVE ...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007) (2)

Exploit for unknown platform in category dos / poc ===================================================================== MS Windows XP/2003 IGMP v3 Denial of Service Exploit MS06-007 2 ===================================================================== / MS06-007 Denial of Service POC exploit...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)

Exploit for unknown platform in category dos / poc ================================================================= MS Windows XP/2003 IGMP v3 Denial of Service Exploit MS06-007 ================================================================= / IGMP v3 DoS Exploit ref:...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)

No description provided by source. / IGMP v3 DoS Exploit ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx by Alexey Sintsov [email protected] Req: Administrator rights on system Windows Firewall off for...

Microsoft Windows XP2003 - IGMP v3 Denial of Service (MS06-007) (1)

Microsoft Windows XP2003 - IGMP v3 Denial of Service MS06-007 1 / IGMP v3 DoS Exploit ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx by Alexey Sintsov [email protected] Req: Administrator rights on system...

Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (1)

/ IGMP v3 DoS Exploit ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx by Alexey Sintsov [email protected] Req: Administrator rights on system Windows Firewall off for sending RAW packets Affected Products:...

CVE-2003-1297

CVE-2003-1297 affects Easy File Sharing (EFS) Web Server 1.2. The web server stores the option.ini (options.ini) file and the log directory under the web root with insufficient access control, enabling remote attackers to read sensitive data. The disclosed data can include an SMTP account usernam...

CVE-2003-1296

CVE-2003-1296 affects Easy File Sharing (EFS) Web Server 1.2. The issue allows remote authenticated users to cause a denial of service by supplying an empty “Title” field or certain data in the “Your Message” field (potentially a long argument). No exploit details or remediation are provided in t...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability

ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-004.html March 14, 2006 -- CVE ID: CVE-2006-0028 -- Affected Vendor: Microsoft -- Affected Products: Office 2000 Office XP Office 2003 -- TippingPointTM IPS Customer Protection:...

CVE-2006-0030

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption...

CVE-2006-0028

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving inval...

Security Update for Excel 2003 (KB905756)

A security vulnerability exists in Microsoft Office Excel 2003 that could allow arbitrary code to run when opening a malicious document. This update addresses that vulnerability...

Microsoft Excel Malformed Parsing Format File Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when a malformed Excel document is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3 Microsoft Excel 2000...

Microsoft Excel Malformed Description Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when an Excel document with malformed description data is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 S...

Default configuration

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...

CVE-2006-0988

The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...