CVE-2001-0919

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript...

CVE-2001-0919: Undefined Security Weakness

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript...

CVE-2001-1552

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...

Multiple Remote Windows XP/ME/98 Vulnerabilities

Multiple Remote Windows XP/ME/98 Vulnerabilities Release Date: 12/20/01 Severity: High Systems Affected: Microsoft Windows XP All default systems Microsoft Windows 98 Certain configurations Microsoft Windows 98SE Certain configurations Microsoft Windows ME Certain configurations Description:...

Переполнение буфера и DoS в SSDP/UpNP в Windows ME

Сервис вылетает при неправильных данных в порт TCP/5000. Переполнение буфера при разборе UDP-датаграммы порт 1900...

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow (1)

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow 1 // source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, ...

CVE-2001-0721

The CVE-2001-0721 entry concerns Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP. The flaw allows remote attackers to cause a denial of service (memory consumption or crash) by sending a malformed UPnP request. The affected stack is UPnP handling in Windows, with NETWORK attack vec...

CVE-2001-0721

Universal Plug and Play UPnP in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service memory consumption or crash via a malformed UPnP request...

CVE-2001-0721: Undefined Security Weakness

Universal Plug and Play UPnP in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service memory consumption or crash via a malformed UPnP request...

Security Bulletin MS01-054

---------------------------------------------------------------------- Title: Invalid Universal Plug and Play Request can Disrupt System Operation Date: 01 November 2001 Software: Windows 98, Windows ME, Windows XP Impact: Denial of Service Bulletin: MS01-054 Microsoft encourages customers to...

BadBlue v1.02 beta for Windows 98, ME and 2000 .php Source Code Disclosure Vulnerability

-- iSecureLabs BadBlue v1.02 beta for Windows 98, ME and 2000 Advisory -- BadBlue v1.02 beta for Windows 98, ME and 2000 .php Source Code Disclosure Vulnerability Problem discovered: 22/08/2001 -- Overview -- BadBlue http://badblue.com/ is a tiny, free download that lets you share files, search...

CVE-2001-1116

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display...

CVE-2001-0003

The CVE-2001-0003 entry concerns Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me. The issue is that WEC does not correctly process Internet Explorer security settings for NTLM authentication, which can allow an attacker to obtain NTLM credentials and potentially o...

CVE-2001-0152

The CVE-2001-0152 issue affects Plus! for Windows 98/Me where the password protection option for Compressed Folders writes password information to a file, enabling local users to recover passwords and read the compressed folders. Connected data show that the related log file dynazip.log can conta...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

CVE-2001-0003: Undefined Security Weakness

Web Extender Client WEC in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication"...

CVE-2001-0152: Undefined Security Weakness

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Advisory for Small HTTP Server

Advisory for Small HTTP Server v2.03 Site: http://feokt.spb.ru by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0111 /-|=explanation=|- Small HTTP Server is a webserver. It has a simple denial of service. /-|=who is vulnerable=|- Anyone running Small HTTP Server v2.03 and...

Advisory for GoAhead Webserver v2.1

Advisory for GoAhead Webserver v2.1 GoAhead Webserver is made by GoAhead. Site: http://www.goahead.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0104 /-|=explanation=|- GoAhead is well, a webserver. It has a denial of service. /-|=who is vulnerable=|- Anyone runnin...