Microsoft Windows NT 4.0/2000 - TCP/IP Printing Service Denial of Service

source: https://www.securityfocus.com/bid/1082/info The TCP/IP Printing Service also known as Print Services for Unix in Windows 2000 is the mechanism used for print service integration with Unix environments. It relies on port 515 for data transmittal. A malformed print request sent to this...

Microsoft Windows NT 4.02000 - TCPIP Printing Service Denial of Service

Microsoft Windows NT 4.02000 - TCPIP Printing Service Denial of Service source: https://www.securityfocus.com/bid/1082/info The TCP/IP Printing Service also known as Print Services for Unix in Windows 2000 is the mechanism used for print service integration with Unix environments. It relies on po...

winmail305.txt

I found some vulnerabilities if windmail run as a CGI application.tested On WindowsNT 4.0, Windmail 3.05 successfully. WindMail is a 32-bit Windows console program by geocel that gives you command-line e-mail messaging capability. You can download an evaluation copy of WindMail 3.0 at:...

CVE-2000-0197

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

CVE-2000-0089

The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...

CVE-2000-0089

Technical details about CVE-2000-0089 are not publicly available in the provided connected documents. Monitor for updates from official sources; current documents reiterate the legacy vulnerability description without additional specifics.

CVE-2000-0197

The CVE-2000-0197 entry describes a local privilege escalation in Windows NT where the scheduler uses the drive mapping of the currently logged-in interactive user. A local attacker could gain privileges by placing a Trojan horse batch file in place of the original batch file, enabling execution ...

CVE-2000-0121: Undefined Security Weakness

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

CVE-2000-0197: Undefined Security Weakness

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...

CVE-2000-0089: Undefined Security Weakness

The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...

Microsoft Windows NT 4.0 - User Shell Folders

Microsoft Windows NT 4.0 - User Shell Folders source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set...

iis-enumerate.txt

I was recently auditing the security on one of my web servers when I cameacross a new Extension Enumerate Root Web Server Directory Vulnerability forIIS 4.0. Going to the main website and asking for anything.idq I get thepage cannot be found. But if the files for the web server reside on a sharet...

Microsoft Windows NT 4.0 - User Shell Folders

source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set to be writeable by any authenticated user...

sambar.bat.txt

PRODUCT ------- The Sambar Server is a multi-threaded HTTP, FTP and Proxy server for Windows NT and Windows 95. AFFECTED VERSIONS ----------------- All version of Sambar server running under Windows NT 4.0 and Windows 2000. Windows 98 version is vulnerable. VULNERABILITY DESCRIPTION...

CVE-2000-0155

CVE-2000-0155 affects Windows NT Autorun: the system executes the autorun.inf file on non-removable media, allowing a local attacker to specify an alternate program to run when other users access a drive. The provided documents describe the vulnerability in terms of its existence and impact (loca...

CVE-2000-0155

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive...

CVE-2000-0155: Improper Control of Generation of Code

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive...

CVE-2000-0155

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive...

CVE-2000-0197

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...