641 matches found
MS06-025 Microsoft RRAS Service RASMAN Registry Overflow
This module exploits a registry-based stack buffer overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on...
MS06-025 Microsoft RRAS Service Overflow
This module exploits a stack buffer overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on Windows 2000...
Desktop Orbiter Unpassworded Access Remote Reboot DoS
The remote host is running a Desktop Orbiter Satellite As this service is unpassworded, an attacker may connect to it to reboot the remote host or take administrative control over it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11713; scriptversion"$Revision: 1.14...
CVE-2002-0366
Buffer overflow in Remote Access Service RAS phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server RRAS allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry...
Microsoft Internet Explorer 6 - URI Handler Restriction Circumvention
source: https://www.securityfocus.com/bid/5730/info Microsoft Windows Internet Explorer 6.0 SP1 introduced restrictions for certain URI handlers such as file:// and res://. It has been demonstrated in the past that these URI handlers could be abused and incorporated into different types of attack...
CVE-2002-0366
Buffer overflow in Remote Access Service RAS phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server RRAS allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry...
Security Bulletin MS02-029: Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138)
---------------------------------------------------------------------- Title: Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution Q318138 Date: 12 June 2002 Software: Windows NT 4.0, NT 4.0 Terminal Server Edition, 2000, XP, Routing and Remote Access Server RRAS...
Microsoft Remote Access Service API contains buffer overflow vulnerability via phonebook entries
Overview The Microsoft Remote Access Service API contains a vulnerability that allows local attackers to execute arbitrary code with system privileges. Description The Microsoft Remote Access Service RAS Application Programming Interface API allows Windows programs to make dial-up connections to...
Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries
Overview The Microsoft Remote Access Service API contains a vulnerability that allows local attackers to execute arbitrary code with system privileges. Description The Microsoft Remote Access Service RAS Application Programming Interface API allows Windows programs to make dial-up connections to...
Symantec pcAnywhere Service Unrestricted Access
The pcAnywhere service does not require a password to access the desktop of this system. If this machine is running Windows 95, 98, or ME, gaining full control of the machine is trivial. If this system is running NT or 2000 and is currently logged out, an attacker can still spy on and hijack a...
Entrust Bulletin E01-005: GetAccess Access Service vulnerability
Entrust Security Bulletin E01-005 ================================= Entrust GetAccesstm Access Service Vulnerability SUMMARY: ======== A vulnerability has been identified in Entrust GetAccess that could allow unauthorized retrieval of files on certain GetAccess web servers. Entrust recommends...
CVE-2000-0120
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter...
CVE-2000-0120
The CVE-2000-0120 entry concerns Allaire Spectra 1.0, where the Remote Access Service invoke.cfm template allows bypassing authentication via the bAuthenticated parameter. This constitutes a vulnerability in the authentication logic of the template, enabling partial disclosure/modification risks ...
CVE-1999-0715
Buffer overflow in Remote Access Service RAS client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry...
CVE-2000-0120
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter...
PT-1999-1007 · Microsoft · Nt
Name of the Vulnerable Software and Affected Versions: NT systems affected versions not specified Description: The issue is related to a denial of service in RAS/PPTP on NT systems. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-1999-0715
Buffer overflow in Remote Access Service RAS client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry...
Q318138: Security Update (Windows XP)
This update resolves the "Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution" security vulnerability in Windows XP. This vulnerability is the result of an unchecked buffer in the Remote Access Service RAS Phonebook. Download now to eliminate this vulnerability by...
Security Update for Windows Server 2003 (KB911280)
A remote code execution security issue has been identified in the Routing and Remote Access service that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you instal...
