3807 matches found
IBM DB2 Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to the database. During the installation of DB2,...
Nevis Systems All-Mail 1.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim...
Windows NTLM Weak Nonce Vulnerability
No description provided by source. Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory UR...
Microsoft Windows XP/2000/NT 4 Locator Service Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6666/info It has been reported that the Microsoft Windows Locator service is affected by a remotely exploitable buffer overflow vulnerability. The condition is due to a memory copy of RPC arguments received from remote...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 RAS Dial-up Networking "Save Password" Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/232/info Windows NT allows users to save their RAS and/or RRAS credentials by using the 'Save Password' checkbox when making a dial-up connection. Credentials saved in this manner are stored in the...
FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (5)
No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...
Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/20360/info Symantec AntiVirus is prone to a privilege-escalation vulnerability. Local attackers can exploit this issue to corrupt memory and execute arbitrary code with kernel-level privileges. Successful exploits may...
Oracle Web Listener 4.0 .x for NT Batch File Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on the server,...
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5 RASMAN Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/645/info Any authenticated NT user ie domain user can modify the pathname for the RASMAN binary in the Registry. The next time the RAS Service is started, the trojan service referenced by the RASMAN pathname will be...
BindView HackerShield 1.0/1.1 HackerShield AgentAdmin Password Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/628/info The BindView HackerShield product originally Netect's HackerShield creates an NT service account called NetectAgentAdmin$. This account is a member of the local administrators group on an NT host. The service...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 DoS Duplicate Hostname Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/298/info NT Workstations and Servers must have unique hostnames if they reside on the same network. Should an NT host attempt to use an existing hostname, the second server with the new duplicate name will fail to start i...
Byte Fusion BFTelnet 1.1 Long Username DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/771/info BFTelnet, a telnet server for Windows NT by Byte Fusion, will crash if a user name of 3090 or more characters is supplied. telnet victim.com Login: 3090 charcter string...
NT 4.0 / Windows 2000 TCP/IP Printing Service DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1082/info The TCP/IP Printing Service also known as Print Services for Unix in Windows 2000 is the mechanism used for print service integration with Unix environments. It relies on port 515 for data transmittal. A malform...
Microsoft HTML Workshop <= 4.74 Universal Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Microsoft HTML Workshop = 4.74 Universal Buffer Overflow Exploit ----------------------------------------------------------------- Discovered/Exploit by SkD [email protected] ----------------------------------------------------------------- This ...
Microsoft Windows NT 4.0 / 2000 Predictable LPC Message Identifier Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between differen...
Microsoft Windows NT 4.0 User Shell Folders Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set to be...
Smartwin Technology CyberOffice Shopping Cart 2.0 Price Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modifi...
Caucho Technology Resin 2.1.12 Directory Listings Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9617/info It has been reported that Resin may be prone to an information disclosure vulnerability that may allow an attacker to disclose directory listings by passing malicious data via a URI parameter. The issue has been...
Check Point Software Firewall-1 4.0/1.4.1 Resource Exhaustion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1416/info The Check Point Firewall-1 SMTP Security Server in Firewall-1 4.0 and 4.1 on Windows NT is vulnerable to a simple network-based attack which can increase the firewall's CPU utilization to 100%. Sending a stream ...
apache tomcat 3.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with specially...