CVE-1999-0749

Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument...

CVE-1999-1206

SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references 1 the...

camshot.overflow.txt

---------- Forwarded message ---------- From: "Ussr Labs" To: "TECHNOTRONIC" Subject: Local / Remote GET Buffer Overflow Vulnerability in CamShot WebC= am HTTP Server v2.5 for Win9x/NT Date: Thu, 30 Dec 1999 14:04:14 -0300 Local / Remote GET Buffer Overflow Vulnerability in CamShot WebCam HTTP...

Microsoft Windows 95/98/NT 4.0 - Help File Backdoor

source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...

CVE-1999-0387

A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords...

CVE-1999-1189

Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file...

Microsoft Windows 95/98/Enterprise Server 4/NT Server 4/Terminal Server 4/Workstation 4 - Riched Buffer Overflow

Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Workstation 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a Riched Buffer Overflow Vulnerability source:...

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which...

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which fails to perform proper bounds checking on the 'From:' head...

CVE-2000-0330

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability...

Microsoft Windows 9598 - UNC Buffer Overflow (2)

Microsoft Windows 9598 - UNC Buffer Overflow 2 // source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename...

Microsoft Windows 95/98 - UNC Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker can cause the machine to crash or...

CVE-1999-1065

Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode...

expressfs.ftpserver.txt

ExpressFS 2.x Server ExpressFS 2.x FTP Server Problem: we found in the ExpressFS 2.x FTP Server and earlier a vulnerable to remotely exploitable bufferoverflow This can result in a denial of service and at worst in arbitrary code being executed on the system. The vulnerabilities are the conjuncti...

wftpd.txt

From: Luciano Martins Subject: WFTPD v2.40 FTPServer remotely exploitable buffer overflow vulnerability We found in the WFTPD v2.34,v2.40 Server and earlier a vulnerable to remotely exploitable buffer overflow. This can result in a denial of service and at worst in arbitrary code being executed o...

CVE-1999-0357

CVE-1999-0357 concerns a denial-of-service condition in Windows 98 and other operating systems triggered by crafted “oshare” packets, potentially involving invalid fragmentation offsets. The available documents confirm the affected platform is Windows 98, with the vulnerability being that remote ...

CVE-1999-0357

Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets...

CVE-1999-0391

CVE-1999-0391 involves the reuse of the SMB authentication cryptographic challenge in Windows 95/Windows 98, enabling an attacker to replay the response and impersonate a user. Affected software is Windows 95 and Windows 98; the vulnerability lies in the SMB authentication verification (cryptogra...

EUVD-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

telnet_heap_exploit.txt

Subject: telnet.exe heap overflow - remotely exploitable To: [email protected] Heap Overflow in windows 98 Telnet.exe - remote via IE5 ------------------------------------------------------------ Jeremy Kothe [email protected] or [email protected] More fun and games courtesy of Microso...