4042 matches found
CVE-1999-0366
In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value...
Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration
Microsoft IIS 4 Windows NT - Remote Web-Based Administration source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy...
Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration
source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...
CVE-1999-0448
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request...
Microsoft IIS 3.0/4.0 - Upgrade BDIR.HTR
source: https://www.securityfocus.com/bid/2280/info Microsoft Internet Information Server IIS 3.0 came with a series of remote administration scripts installed in /scripts/iisadmin off the web root directory. ism.dll is required for processing these scripts, and version 3.0 of IIS came with an...
Hylafax 4.0 pl2 Faxsurvey - Remote Command Execution
source: https://www.securityfocus.com/bid/2056/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Unpatched version of Hylafax ship with an insecure script, faxsurvey, which allows remote command execution with the privileges of the web serve...
BSDI 4.0 tcpmux inetd - Crash
BSDI 4.0 tcpmux inetd - Crash source: https://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i It is also claimed...
CVE-1999-0225
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size...
CVE-1999-1581
Memory leak in Simple Network Management Protocol SNMP agent snmp.exe for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service memory consumption via a large number of SNMP packets with Object Identifiers OIDs that cannot be decoded...
Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service
source: https://www.securityfocus.com/bid/2244/info The Simple Network Management Protocol SNMP provides remote network administration functions. Windows NT provides an optional SNMP implementation. Windows NT networks can use Windows Internet Name Service WINS, a DNS-like service, to register...
CVE-1999-1387
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...
Digital Ultrix 4.0/4.1 - '/usr/bin/chroot' Local Privilege Escalation
source: https://www.securityfocus.com/bid/17/info By default, /usr/bin/chroot is improperly installed in Ultrix versions 4.0 and 4.1. Anyone can execute /usr/bin/chroot this can lead to system users to gain unauthorized privileges. $ mkdir /tmp/etc $ echo root::0:0::/:/bin/sh /tmp/etc/passwd $...
CVE-1999-1467
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user...
Netscape Servers Heap Buffer Overflow
Advisory ID Internal CORE-2103101 Bugtraq ID: 1865 CVE Name: Non currently assigned. Title: Netscape Servers Heap Buffer Overflow Class: Boundary Condition Error Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode: USER RELEASE Communications with the vendor have been...
Windows XP Media Center Edition 2005, Version 4.0
Windows XP Media Center Edition 2005, Version 4.0...
MS04-011: Security Update for Microsoft Windows
None None...
MS04-022: A vulnerability in Task Scheduler could allow code execution
None None...
Microsoft Support
None None...