453 matches found
CVE-1999-1201
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service traffic amplification via a certain ICMP echo ping packet, which causes all stacks to send a ping response, aka TCP Chorusing...
CVE-1999-1189
The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...
CVE-2004-0201
The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...
CYSA-0329.txt
Cyrillium Security Advisory CYSA-0329 [email protected] http://www.cyrillium.com/ Cyrillium Security Solutions and Services April 29th, 2004 Severity: High Password Compromise Vendor: SmartStuff Software member of Riverdeep Interactive Learning, Inc. Affected Products: FoolProof Security...
SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery
// source: https://www.securityfocus.com/bid/10467/info FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized administrative access to the application...
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code...
WFBE.txt
// File Browsing Exploit // Tested on Windows 98 running Novell 3.2.0.0 // // By, t0mMaC // AIM: t0mMaC2600 // // // Disclaimer: // This is for experimental purposes only, using this venerability to gain access to nodes, hard drives, // directories, etc which your not suppose to be in is illegal...
CVE-2004-0420
CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code...
Microsoft Windows ASN.1 library contains a memory management vulnerability
Overview Microsoft's ASN.1 library contains a memory management error that could be exploited by a remote attacker to cause a denial-of-service situation, or execute arbitrary code. Description Microsoft's ASN.1 library contains a memory management error, potentially a "double-free" condition. By...
Microsoft Windows 98 - Fragmented UDP Flood Denial of Service
Microsoft Windows 98 - Fragmented UDP Flood Denial of Service // source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of...
Microsoft Windows 98 - Fragmented UDP Flood Denial of Service
// source: https://www.securityfocus.com/bid/8543/info A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly...
ZoneAlarm 3.7.202/PRO 4.0/PRO 4.5 - Random UDP Flood Denial of Service (2)
// source: https://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the vulnerable software. /...
DoS Vulnerabilities in Crob FTP Server 2.60.1
DoS Vulnerabilities in Crob FTP Server 2.60.1 Tested on Windows 98 Crash the Server with "con": Rename a file to "con" and the server will crash. Crash the Server with "s": Login with ssssss Send FTP commands with sssss like dir ssssss Zero X, member of www.lobnan.de and www.lostkey.org...
CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML Conversion Library Original issue date: July 14, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Windows 98 and 98 Second Edition SE...
BRS WebWeaver: POST and HEAD Overflaws
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: POST and HEAD Overflaws product: BRS WebWeaver v1.04 and prior i guess vendor: www.brswebweaver.com risk: high date: 05/25/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
XSS in Python Documentation Server
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: XSS in Python Documentation Server product: Python 2.2.2 and 2.3a2 for Win32 vendor: http://www.python.org risk: low date: 04/02/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
CVE-2002-1940
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...
[SecurityOffice] Hyperion Ftp Server v2.8.1 Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Hyperion Ftp Server v2.8.1 Directory Traversal Vulnerability -- - -- Type Directory Traversal - -- Release Date November 12, 2002 - -- Product / Vendor Hyperion FTP Server is a powerful, reliable FTP server for Windows 95/98/NT/2000, and supports...