MS04-006: WINS Server Remote Overflow (830352)

The remote Windows Internet Naming Service WINS is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted packet with improperly advertised lengths. C Tenable Network Security, Inc...

[SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)

-------------------------------------------------------------------------- Debian Security Advisory DSA 433-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2004 http://www.debian.org/security/faq -...

CVE-2003-0949

...

CVE-2003-0987

moddigest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

CVE-2003-0368

Nokia Gateway GPRS support node GGSN allows remote attackers to cause a denial of service kernel panic via a malformed IP packet with a 0xFF TCP option...

CVE-2003-0902

Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

CVE-2003-0175

SGI IRIX before 6.5.21 allows local users to cause a denial of service kernel panic via a certain call to the PIOCSWATCH ioctl...

CVE-2003-0816

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by 1 using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, 2 using the window.open method to load a file: URL containing Javascript, as demonstrated using...

CVE-2003-0817

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object...

CVE-2003-0987

CVE-2003-0987 affects Apache’s mod_digest prior to 1.3.31, where nonce verification using an AuthNonce secret can enable a replay attack. Affected component: mod_digest in the Apache HTTP Server. Root cause: improper nonce validation allows interception and replay of Digest authentication sequenc...

CVE-2003-0815

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by 1 modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or 2 modifying the createRange method and using the...

CVE-2003-0823

Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027...

CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

Windows XP/2003 server service memory leak

Memory leak on directory cration/deletion...

smbmountDoS.txt

Announced: 2004-02-02 Type: Denial of Service Attack on Windows Impact: smbmount can stop Windows from sharing files Writer: Daniel Kabs, Germany [email protected] Credits: Thanks to Steve Ladjabi [email protected] Contents: 1. Abstract 2. Affected Systems 3. Attack Setup 4. Symptoms 5...

CVE-2003-1207

Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service crash via a dir command with a large number of "." characters followed by a "/" string...

CVE-2003-1032

CVE-2003-1032 affects Pi3Web web server 2.0.2 Beta 1: when Directory Index is set to the Name column and sorted by the column title as a hyperlink, a malformed URL can cause a remote denial of service (crash), possibly involving a buffer overflow. No further exploit details or fixes are provided ...

MS Windows XP/2003 Samba Share Resource Exhaustion Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows XP/2003 Samba Share Resource Exhaustion Exploit ========================================================== !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve...