4062 matches found
Security Bulletin MS01-048
---------------------------------------------------------------------- Title: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail Date: 10 September 2001 Software: Microsoftr Windows NTr 4.0 Impact: Denial of service Bulletin: MS01-048 Microsoft encourages customers to review...
CVE-2001-0709
Vulnerability summary (CVE-2001-0709): Microsoft IIS 4.0 and earlier, when installed on a FAT partition, is susceptible to remote disclosure of ASP source code. An attacker can obtain the source by requesting a URL encoded with Unicode. The description in the provided documents confirms the expos...
CVE-2001-0509
CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...
Security Bulletin MS01-043
---------------------------------------------------------------------- Title: NNTP Service in Windows NT 4.0 and Windows 2000 Contains Memory Leak Date: 14 August 2001 Software: Windows NT 4.0, Windows 2000 Impact: Denial of service Bulletin: MS01-043 Microsoft encourages customers to review the...
Security Bulletin MS01-044
---------------------------------------------------------------------- Title: 15 August 2001 Cumulative Patch for IIS Date: 15 August 2001 Software: IIS 4.0 and 5.0 Impact: Five vulnerabilities resulting in either denial of service or privilege elevation Bulletin: MS01-044 Microsoft encourages...
Microsoft IIS 4.05.0 - SSI Buffer Overrun Privilege Escalation
Microsoft IIS 4.05.0 - SSI Buffer Overrun Privilege Escalation // source: https://www.securityfocus.com/bid/3190/info A vulnerability exists in Microsoft IIS 4.0 and 5.0 that could allow a user with permission to write content to the IIS server to run any code in Local System context. / jim.c - I...
CVE-2001-1122
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service crash in lsass.exe by running the NT4ALL exploit program in 'SPECIAL' mode...
a couple minor issues with mathematica license manager
Hi, Two not too serious bugs in the network license manager mathlm for Mathematica versions 4.0 and 4.1, on at least the Intel linux platform, probably every version and every platform. These can both lead to a denial of service on mathlm stopping legitimate machines from getting licenses to run...
Security Bulletin MS01-040
---------------------------------------------------------------------- Title: Invalid RDP Data Can Cause Memory Leak in Terminal Services Date: 25 July 2001 Software: Windows 2000 Server and Windows NT 4.0, Terminal Server Edition Impact: Denial of Service Bulletin: MS01-040 Microsoft encourages...
Microsoft Services for UNIX Telnet server is vulnerable to denial of service via memory leak
Overview The telnet server included in the Microsoft Services for Unix package contains a denial-of-service vulnerability that may cause the system to become unstable or crash. Description The telnet server included in the Microsoft Services for Unix SFU package contains a memory leak that can le...
CVE-2001-0245
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...
CVE-2001-0460
Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service memory exhaustion via an extremely large HTTP Referrer: header...
NSFOCUS SA2001-03 : Microsoft FrontPage 2000 Server Extensions Buffer Overflow Vulnerability
NSFOCUS Security AdvisorySA2001-03 Topic: Microsoft FrontPage 2000 Server Extensions Buffer Overflow Vulnerability Release DateЈє 2001-6-25 CVE CAN ID : CAN-2001-0341 BUGTRAQ ID : 2841 Affected system: ================ Microsoft FrontPage 2000 Server Extensions - Microsoft IIS 4.0 - Microsoft IIS...
Advisory CA-2001-13
CERT Advisory CA-2001-13 Buffer Overflow In IIS Indexing Service DLL Original release date: June 19, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft Windows NT 4.0 with IIS 4.0 or IIS 5.0 enabled Systems...
Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters
Overview A vulnerability exists in the Indexing services used by Microsoft IIS 4.0 and IIS 5.0 running on Windows NT, Windows 2000, and beta versions of Windows XP. Exploitations of this vulnerability allows a remote intruder to run arbitrary code on the victim machine. Description There is a...
CVE-2001-0460
Websweeper 4.0 is affected: it does not limit the length of certain HTTP headers, enabling a DoS via an extremely large Referrer header. OpenVAS entries corroborate a denial-of-service path by sending invalid HTTP requests, potentially crashing or destabilizing the server. The CVE details do not ...
CVE-2001-0006
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...
CVE-1999-0924
The CVE-1999-0924 entry concerns ColdFusion Server 4.0, where the Syntax Checker component is the vulnerable element. The issue enables remote denial of service. The connected documents reiterate the same description and do not provide explicit exploit vectors, affected build numbers beyond “4.0,...
CVE-2001-0017
The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...
