"Absent Directory Browser Argument" DoS

"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....

ISBASE Security Advisory(SA2000-02)

ISBASE Security AdvisorySA2000-02 Topic: IIS ISM.DLL truncation exposes file content Release Date: July 17, 2000 Affected software version: =========================== Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 Platform: ========== Windows NT 4.0 and Windo...

Security Bulletin (MS00-044)

Microsoft Security Bulletin MS00-044 - -------------------------------------- Patch Available for "Absent Directory Browser Argument" Vulnerability Originally Posted: July 14, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities in Microsoftr Internet...

VIGILANTE-2000003.txt

"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....

Security Bulletin (MS00-030)

Microsoft Security Bulletin MS00-030 - -------------------------------------- Patch Available for "Malformed Extension Data in URL" Vulnerability Originally Posted: May 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet...

Remote DoS attack in Internet Information Server 4.0 & 5.0 "Malformed Extension Data in URL" Vulnerability

Remote DoS attack in Internet Information Server 4.0 & 5.0 "Malformed Extension Data in URL" Vulnerability USSR Advisory Code: USSR-2000040 Release Date: May 11, 2000 Affected Software Versions Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 THE PROBLEM The Uss...

Security Bulletin (MS00-031)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-031 - -------------------------------------- Patch...

Security Bulletin (MS00-023)

Microsoft Security Bulletin MS00-023 - -------------------------------------- Patch Available for "Myriad Escaped Characters" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information...

Alert: MS Index Server (CISADV000330)

Cerberus Information Security Advisory CISADV000330 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 30th March 2000 Name : Index Server Strike 3! Affected Systems : Microsoft Internet Information Server Issue : Attackers can gain source of ASP and other pages Author : David Litchfie...

iis4.webhits.txt

Cerberus Information Security Advisory CISADV000126 http://www.cerberus-infosec.co.uk/advisories.html Released : 26th January 2000 Name : Webhits.dll buffer truncation Affected Systems: Microsoft Windows NT 4 running Internet Information Server 4 All service Packs Issue : Attackers can access fil...

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (1)

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 1 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service (2)

Microsoft Windows NT 4.0SP1SP2SP3SP4SP5SP6 - Services.exe Denial of Service 2 source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will...

eEye.retina.vs.iis4.txt

Retina vs. IIS4, Round 2, KO eEye - Digital Security Team [email protected] Tue, 15 Jun 1999 12:18:16 -0000 Retina vs. IIS4, Round 2 Systems Affected: Internet Information Server 4.0 IIS4 Microsoft Windows NT 4.0 SP3 Option Pack 4 Microsoft Windows NT 4.0 SP4 Option Pack 4 Microsoft Windows NT 4.0 SP...

ms-iis4-siteserver2.txt

Date: Sat, 30 Jan 1999 13:02:09 -0000 From: mnemonix To: [email protected] Subject: Security Advisory for Internet Information Server 4 with Site Server 2. The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be...

Microsoft IIS 2.03.0 - Long URL Denial of Service

Microsoft IIS 2.03.0 - Long URL Denial of Service // source: https://www.securityfocus.com/bid/2654/info Microsoft Internet Information Server is vulnerable to a denial of service. This particular denial of service affects versions 2.0, 3.0 and 4.0 of the server prior to service pack 4. The URL...

Microsoft IIS 2.0/3.0 - Long URL Denial of Service

// source: https://www.securityfocus.com/bid/2654/info Microsoft Internet Information Server is vulnerable to a denial of service. This particular denial of service affects versions 2.0, 3.0 and 4.0 of the server prior to service pack 4. The URL which causes this issue is of the format...

BEA Weblogic Multiple Buffer Overflow Vulnerabilities

Advisory ID Internal CORE-081300 Bugtraq ID: 1570 CVE Name: CVE-2000-0681 Title: BEA Weblogic Multiple Buffer Overflow Vulnerabilities Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vulnerability Description: BEA Systems Inc. Weblogic server...