CVE-1999-1370

The CVE-1999-1370 entry concerns the Internet Explorer 5.0 setup wizard (ie5setup.exe). The provided sources state that during unattended installation it disables the screen saver and the Task Scheduler Service, potentially allowing local access or disruption of security-critical program executio...

CVE-1999-1041

CVE-1999-1041 is a local privilege escalation affecting SCO OpenServer 5.0 and SCO UNIX 3.2v4 through a buffer overflow in the mscreen program. The vulnerability can be triggered by processing an excessively long TERM environment variable and by an overly long entry in the .mscreenrc file, enabli...

Security Bulletin MS01-044

---------------------------------------------------------------------- Title: 15 August 2001 Cumulative Patch for IIS Date: 15 August 2001 Software: IIS 4.0 and 5.0 Impact: Five vulnerabilities resulting in either denial of service or privilege elevation Bulletin: MS01-044 Microsoft encourages...

Microsoft IIS 4.05.0 - SSI Buffer Overrun Privilege Escalation

Microsoft IIS 4.05.0 - SSI Buffer Overrun Privilege Escalation // source: https://www.securityfocus.com/bid/3190/info A vulnerability exists in Microsoft IIS 4.0 and 5.0 that could allow a user with permission to write content to the IIS server to run any code in Local System context. / jim.c - I...

Microsoft IIS 5.0 - In-Process Table Privilege Escalation

source: https://www.securityfocus.com/bid/3193/info A vulnerability exists in Microsoft's Internet Information Services 5.0 which could allow a user with write permission to run any code with System privileges...

cold fusion 5.0 cfrethrow exploit

Vulnerable: Cold Fusion 5.0 Invulnerable: Versions of Cold Fusion below 5.0 do not seem to have the same problem. OS: Only tried on RedHat Linus 2.4.2-2 1 Allaire reports a Cold Fusion bug that can be found at this address: http://www.allaire.com/Handlers/index.cfm?ID=17560&Method=Full. The bug...

Immunity Canvas: MS01_033

Name| ms01033 ---|--- CVE| CVE-2001-0500 Exploit Pack| CANVAS Description| IIS 5.0 Index Server ISAPI .ida Overflow Notes| CVE Name: CVE-2001-0500 VENDOR: Microsoft MSADV: MS01-033 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/MS01-033.mspx CVE Ur...

CVE-2001-1245

Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name...

Immunity Canvas: MS01_023

Name| ms01023 ---|--- CVE| CVE-2001-0241 Exploit Pack| CANVAS Description| IIS 5.0 IPP ISAPI .printer Overflow Notes| CVE Name: CVE-2001-0241 VENDOR: Microsoft MSADV: MS01-023 VersionsAffected: Repeatability: References: http://www.microsoft.com/technet/security/bulletin/MS01-023.mspx CVE Url:...

CVE-2001-0336

The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request...

CVE-2001-0241

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0...

CVE-2001-0334

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded...

NSFOCUS SA2001-03 : Microsoft FrontPage 2000 Server Extensions Buffer Overflow Vulnerability

NSFOCUS Security AdvisorySA2001-03 Topic: Microsoft FrontPage 2000 Server Extensions Buffer Overflow Vulnerability Release DateЈє 2001-6-25 CVE CAN ID : CAN-2001-0341 BUGTRAQ ID : 2841 Affected system: ================ Microsoft FrontPage 2000 Server Extensions - Microsoft IIS 4.0 - Microsoft IIS...

Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters

Overview A vulnerability exists in the Indexing services used by Microsoft IIS 4.0 and IIS 5.0 running on Windows NT, Windows 2000, and beta versions of Windows XP. Exploitations of this vulnerability allows a remote intruder to run arbitrary code on the victim machine. Description There is a...

CVE-2001-0146

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service memory allocation error by repeatedly sending a series of specially formatted URL's...

CVE-2001-0382

CVE-2001-0382 affects Computer Associates CCC Harvest 5.0 for Windows NT/2000. The vulnerability arises from weak password encryption, allowing a remote attacker to gain privileges within the Harvest application. CVSS v2 base score is 7.5 (HIGH) with network attack vector and no authentication. T...

CVE-2001-0382

Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...

CVE-2001-0337

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests...

CVE-2001-0337

The vulnerability CVE-2001-0337 affects Microsoft Internet Information Services 5.0 and earlier, specifically the WebDav component (httpext.dll). A memory-leak flaw allows a malicious user to exhaust server memory by issuing many LOCK requests against a non-existent filename, potentially leading ...

Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service

source: https://www.securityfocus.com/bid/2736/info Microsoft IIS 5.0 is vulnerable to a denial of service attack. A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent files via the HTTP LOCK method. This leads to a complete consumption o...