Infinite HTTP Request DoS Vulnerability

It was possible to kill the web server by sending an invalid SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MUP overlong request kernel overflow Patch (Q311967)

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...

Checks for MS HOTFIX for snmp buffer overruns

There is an Unchecked Buffer in SNMP Service and this checks to see if the Microsoft Patch has been applied only checks NT/Win2k and XP Pro. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

WM_TIMER Message Handler Privilege Elevation (Q328310)

A security issue has been identified in WMTIMER that could allow an attacker to compromise a computer running Microsoft Windows and gain complete control over it. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Flaw in Certificate Enrollment Control (Q323172)

A vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to delete digital certificates on a user's system via HTML. Impact of vulnerability: Denial of...

RIS (Remote Installation Service) Detection (Windows SMB Login)

SMB login-based detection of RIS Remote Installation Service. SPDX-FileCopyrightText: 2005 Jorge Pinto And Nelson Gomes Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use LDAP search request to retrieve information from NT Directory Services

It is possible to disclose LDAP information. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12105...

security flaw

Stack-based buffer overflow in the ntlmoutput function in http-ntlm.c for 1 wget 1.10, 2 curl 7.13.2, and 3 libcurl 7.13.2, and other products that use libcurl, when NTLM authentication is enabled, allows remote servers to execute arbitrary code via a long NTLM username...

windows NT/2k/XP useradd shellcode for russian systems 318 bytes

Exploit for win32 platform in category shellcode ================================================================ Windows NT/2k/XP useradd shellcode for russian systems 318 bytes ================================================================ / \ win32 useradd shellcode for russian systems / by...

[EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability

Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability Release Date: October 11, 2005 Date Reported: August 3, 2005 Severity: High Remote Code Execution with Authentication Medium Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Windows XP eEy...

[security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBMA01225 REVISION: 1 SSRT051030 rev.1 - HP OpenView Event Correlation Services OV ECS Remote Unauthorized Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL...

postmaster.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Postmaster 4.2.2 build 3.2.5 multiple vulnerabilities + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.woppoware.com.au/ date: 9 May 2005 Severity: High Systems Affected: Microsoft Windows NT 4.0 all...

CVE-2001-1573: Undefined Security Weakness

Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter...

windows 9x/NT/2k/XP PEB method 29 bytes

Exploit for win32 platform in category shellcode ======================================= Windows 9x/NT/2k/XP PEB method 29 bytes ======================================= // // PEB way of getting kernel32 imagebase by loco. // Compatible with all Win9x/NT based operating systems. // // Gives kernel...

Arbitrary code execution in SlimFTPd v3.16

Arbitrary code execution in SlimFTPd v3.16 discovered by Raphal Rigo Product: SlimFTPd by WhitSoft Development Affected Version: 3.16 verified, =3.16 probably too Not affected Version: 3.17 OS affected: All Win32 Risk: Critical Remote Exploit: yes URL: http://www.whitsoftdev.com/slimftpd/ Overvie...

CVE-2002-2028

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...

CVE-2002-2073

Cross-site scripting XSS vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 ctr parameter in Default.asp and 2 the query string to formslogin.asp...

CVE-2002-2073: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 ctr parameter in Default.asp and 2 the query string to formslogin.asp...

CVE-2002-2028: Undefined Security Weakness

The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...

CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to 1 list Windows services via svcctl or 2 read eventlogs via eventlog...