1666 matches found
Security Bulletin (MS00-080)
Microsoft Security Bulletin MS00-080 - -------------------------------------- Patch Available for "Session ID Cookie Marking" Vulnerability Originally posted: October 23, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Informatio...
@stake Advisory: Unauthorized "Directory Listings" under IIS 5.0 (A100400-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Unauthorized "Directory Listings" under IIS 5.0 Release Date: 10/04/2000 Application: Internet Information Server 5.0 Platform: Windows 2000 Severity: An attacker can enumerate files in...
VIGILANTE-2000009.txt
"Invalid URL" DoS Advisory Code: VIGILANTE-2000009 Release Date: September 6, 2000 Systems Affected: - Internet Information Server 4.0 for Windows NT 4.0 - Possibly Windows NT 4.0 in general read Microsoft's note THE PROBLEM A certain series of requests can cause INETINFO.EXE to gradually consume...
VIGILANTE-2000009: "Invalid URL" DoS
Microsoft Security Bulletin MS00-063 - -------------------------------------- Patch Available for "Invalid URL" Vulnerability Originally posted: September 05, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information Server IIS...
Security Bulletin (MS00-063)
Microsoft Security Bulletin MS00-063 - -------------------------------------- Patch Available for "Invalid URL" Vulnerability Originally posted: September 05, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information Server IIS...
Security Bulletin (MS00-060)
Microsoft Security Bulletin MS00-060 - -------------------------------------- Patch Available for "IIS Cross-Site Scripting" Vulnerabilities Originally posted: August 25, 2000 Summary ======= Microsoft has released a patch that eliminates security vulnerabilities in Microsoftr Internet Informatio...
Security Bulletin (MS00-058)
Microsoft Security Bulletin MS00-058 - -------------------------------------- Patch Available for "Specialized Header" Vulnerability Originally posted: August 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Internet Information Server that ships...
Security Bulletin (MS00-057)
Microsoft Security Bulletin MS00-057 - -------------------------------------- Patch Available for "File Permission Canonicalization" Vulnerability Originally posted: August 10, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet...
NSFOCUS Security Advisory 2000.2
ISBASE Security AdvisorySA2000-02 Topic: IIS ISM.DLL truncation exposes file content Release Date: July 17, 2000 Affected software version: =========================== Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 Platform: ========== Windows NT 4.0 and Windo...
ISBASE Security Advisory(SA2000-02)
ISBASE Security AdvisorySA2000-02 Topic: IIS ISM.DLL truncation exposes file content Release Date: July 17, 2000 Affected software version: =========================== Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 Platform: ========== Windows NT 4.0 and Windo...
"Absent Directory Browser Argument" DoS
"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....
VIGILANTE-2000003.txt
"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....
Security Bulletin (MS00-044)
Microsoft Security Bulletin MS00-044 - -------------------------------------- Patch Available for "Absent Directory Browser Argument" Vulnerability Originally Posted: July 14, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities in Microsoftr Internet...
Security Bulletin (MS00-030)
Microsoft Security Bulletin MS00-030 - -------------------------------------- Patch Available for "Malformed Extension Data in URL" Vulnerability Originally Posted: May 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet...
Remote DoS attack in Internet Information Server 4.0 & 5.0 "Malformed Extension Data in URL" Vulnerability
Remote DoS attack in Internet Information Server 4.0 & 5.0 "Malformed Extension Data in URL" Vulnerability USSR Advisory Code: USSR-2000040 Release Date: May 11, 2000 Affected Software Versions Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 THE PROBLEM The Uss...
Security Bulletin (MS00-031)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-031 - -------------------------------------- Patch...
Security Bulletin (MS00-023)
Microsoft Security Bulletin MS00-023 - -------------------------------------- Patch Available for "Myriad Escaped Characters" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information...
Alert: MS Index Server (CISADV000330)
Cerberus Information Security Advisory CISADV000330 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 30th March 2000 Name : Index Server Strike 3! Affected Systems : Microsoft Internet Information Server Issue : Attackers can gain source of ASP and other pages Author : David Litchfie...
iis4.webhits.txt
Cerberus Information Security Advisory CISADV000126 http://www.cerberus-infosec.co.uk/advisories.html Released : 26th January 2000 Name : Webhits.dll buffer truncation Affected Systems: Microsoft Windows NT 4 running Internet Information Server 4 All service Packs Issue : Attackers can access fil...
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (1)
Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 1 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...