1846 matches found
CVE-2000-0979
CVE-2000-0979 affects Windows 95/98/Me File and Print Sharing. The service does not properly enforce file-share passwords, allowing a remote attacker to bypass access controls by sending a 1‑byte password that matches the first character of the real password. The documented impact is partial conf...
CVE-2000-0991
Hilgraeve HyperTerminal client for Windows 98/ME/2000 is affected by CVE-2000-0991. The vulnerability is a buffer overflow in the telnet URL handling, allowing remote attackers to execute arbitrary commands via a long telnet URL over a network. Affected component: HyperTerminal client; root cause...
Security Bulletin (MS01-001)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Web...
CVE-2000-0979
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level...
Дырка в Subscribe Me
Любой желающий может удалить адрес из списка рассылки...
Security Advisory: Subscribe Me Lite 1.0 - 2.0 Unix or 1.0 - 2.0 NT and below.
note : This is not apparent in the commercial versions, tested on three different versions the author was notified and appropriate changes have since been made. product page - http://www.cgiscriptcenter.com/subscribe/index2.html vendor notice - Security Advisory: Users of Subscribe Me Lite 1.0 -...
Security Bulletin (MS00-091)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Resending due to a bad signature on a previous mailer. We are in the process of changin...
Проблемы с безопасностьб в Windows ME
Возможность автоматического поиска принтера позволяет загрузить и выполнить файлы на компьютере клиента...
Windows (me) printer sharing vulnerability
I'm not sure how much of this is common knowledge or not but since a quick search showed nothing I felt it appropriate to share with the community. I apologize in advance for the length of writing. One of the new "features" of Windows ME that immediately caught my eye was that as soon as I got...
CVE-2000-0688
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...
Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow
source: https://www.securityfocus.com/bid/1815/info Hilgraeve HyperTerminal is a communications/telnet application shipped and installed with every copy of Microsoft Windows 98, ME, NT 4.0, and 2000. It is the default telnet client in Microsoft 98 and ME but not in Windows NT 4.0 / 2000. A buffer...
DoS против Windows 95/98/ME - NetBIOS driver
При соединении клиента с сервером по netBIOS некорректный ответ сервера приводит к краху ОС...
Проблемы с безопасностью на уровне ресурсов в Windows 95/98/ME (Share Level Password)
Можно удаленно подключиться к защищенному паролем ресурсу не зная пароля и открыть сам пароль в короткий промежуток времени. Кроме того, можно вызвать DoS против системы используя определенные параметры SMB-вызовов...
Microsoft Windows 9x / Me IPX NMPI Packet DoS Vulnerability
Description If NWLink which enables Microsoft Windows to interoperate with Novell stations is enabled on a Windows 9x or ME system, it is possible to create broadcast storms which could severely impede upon network operations or cause certain targeted machines to fail. IPX/SPX Internetworked Pack...
CVE-2000-0688
CVE-2000-0688 concerns Subscribe Me LITE. The vulnerability is that it does not properly authenticate password-change attempts, allowing a remote attacker to gain privileges for the Account Manager by directly invoking subscribe.pl with the setpwd parameter. The available connected documents conf...
CVE-2000-0688
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...
WebTV for Windows 98/ME - Denial of Service
source: https://www.securityfocus.com/bid/1671/info If a remote user sends a UDP packet to any port in the 22701 - 22705 range to a system running WebTV for Windows, the system may crash entirely or at the least the program will stop responding. As well, sending a UDP packet to port 22703...
Microsoft WebTV DoS Vulnerability
Description If a remote user sends a UDP packet to any port in the 22701 - 22705 range to a system running WebTV for Windows, the system may crash entirely or at the least the program will stop responding. As well, sending a UDP packet to port 22703 specifically has been known to cause automatic...
Subscribe Me Vulnerability
Product: Subscribe Me Versions: ALL version numbers LITE only OS: Unix and Winnt Vendor: Notified, http://www.cgiscriptcenter.com/ The Problem: Yet again the script allows a remote user to overwrite the Admin Passwd file with any password they see fit. Therefore giving them Admin access to the...