2847 matches found
CVE-2002-0018
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by...
Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting
Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user...
Подключение под чужим SID между доменами Windows 2000 (privelege escalation)
При вход пользователя из доверяемого домена доверяющий домен не проверяет принадлежность SID доверяющему домену. Это позволяет использовать SID пользователя другого домена...
Microsoft Windows 2000 Telnet Service searches all trusted domains for user accounts
Overview The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows remote attackers to log in using domain accounts without providing a specific domain name. Description The Microsoft Windows 2000 Telnet Service allows users to establish connections using either local account...
IBM GINA for NT 1.0 - Local Privilege Escalation
IBM GINA for NT 1.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/608/info IBM has written a replacement GINA for Windows NT to allow NT hosts to authenticate against OS/2 domains. On machines running the modified GINA, the creation of a specific Registry key under...
PT-1999-1204 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue involves a one-way or two-way trust relationship between Windows NT domains. Recommendations: At the moment, there is no information about a newer version that contains a fix f...