CVE-2003-0525

CVE-2003-0525 describes a heap corruption flaw in Windows NT 4.0’s file name processing (ntdll.dll) triggered by long input passed to java.io.getCanonicalPath, allowing a denial-of-service crash (noted in IBM JVM scenarios). Affected: Windows NT 4.0 environments using IBM/JVM and Java runtimes th...

CVE-2003-0525: Undefined Security Weakness

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service crash via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string t...

Windows NT 4.0 with IBM JVM Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Windows NT 4.0 with IBM JVM Denial of Service Release Date: 07/23/2003 Application: Any Java application, other applications are possible attack vectors. Platform: Java 2 Runtime Environmen...

Windows NT file function DoS

It may be possible to crash application using one of system APi function with oversized filename...

Microsoft Security Bulletin MS03-029: Flaw in Windows Function Could Allow Denial of Service (Q823803)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Windows Function Could Allow Denial of Service 823803 Date: 23 July 2003 Software: Microsoft Windows NT 4.0 Server Impact: Denial of service Max Risk: Moderate Bulletin:...

MS03-029: Flaw in Windows Function may allow DoS (823803)

The remote host is running a version of Windows NT 4.0 that has a flaw in one of its functions that could allow a user to cause a denial of service on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11802; scriptversion"1.34"; scriptcvsdate"Date: 2018/11/15...

CVE-2003-0352

A heap-based buffer overflow exists in the RPCSS Service via a certain DCOM interface for RPC in Microsoft Windows (NT 4.0, 2000, XP, and Server 2003). The vulnerability is triggered by a malformed DCERPC DCOM object activation request packet with modified length fields. This flaw allows remote a...

CVE-2003-0352: Undefined Security Weakness

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms...

MS03-026 Microsoft RPC DCOM Interface Overflow

This module exploits a stack buffer overflow in the RPCSS service, this vulnerability was originally found by the Last Stage of Delirium research group and has been widely exploited ever since. This module can exploit the English versions of Windows NT 4.0 SP3-6a, Windows 2000, Windows XP, and...

CVE-2003-0345

Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required...

Pipe Filename Local Privilege Escalation FAQ

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We have received several inquiries regarding the advisory, "Named Pipe Filename Local Privilege Escalation" that was published by @stake on 07/08/2003. These answers should clarify where the vulnerability actually lies so customers can make informed...

CVE-2003-0345: Undefined Security Weakness

Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute arbitrary code via an SMB packet that specifies a smaller buffer length than is required...

PoC for Internet Explorer >=5.0 buffer overflow (trivial exploit for hard case).

Dear [email protected], Attached exploit for 1 works with 70 probability on Windows NT 4.0 I didn't tested on different systems and it may differ, I don't care because I only wanted to show code execution IS possible. It works slow and may require few minutes to complete, see explanation...

[Full-Disclosure] Megabook 2.0 -XSS & UA execution

------------------------------------------------------------------ - EXPL-A-2003-011 exploitlabs.com Advisory 011 ------------------------------------------------------------------ -= MegaBook =- exploitlabs.com June 29, 2003 Vunerabilitys: ---------------- 1. XSS and Unchecked Input Length 2...

Buffer overflow in Mini HTTP Server

ZUD SECURITY TEAM PRESENT bug found by nimber www.zudteam.org Application: Mini HTTP Server. Versions: 1.0 Platform: Win95/98/NT Web Site: http://www.userworld.com/users/hlingso/remote.htm Bug: Buffer overflow. Crash server by sending long http request. Examples: www.server.ru/AAAAAAAAAAAAmore 78...

Windows Media Services Remote Command Execution

======================================================================== = Windows Media Services Remote Command Execution = = NSIISLOG.DLL Ver 4.1.0.3920 = = MS Bulletin posted: May 28, 2003 revised May 30, 2003 = http ://www.microsoft.com/technet/security/bulletin/MS03-019.asp = = Affected...

Microsoft Security Bulletin MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges 811493 Date: 16 April 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact...

SFAD03-001.txt

================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : iWeb Mini Web Server Remote...

Microsoft IIS 5.0 (Windows XP2000NT 4.0) - WebDAV ntdll.dll Remote Buffer Overflow (3)

Microsoft IIS 5.0 Windows XP2000NT 4.0 - WebDAV ntdll.dll Remote Buffer Overflow 3 E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds...

MS Windows RPC Locator Service Remote Exploit

Exploit for unknown platform in category remote exploits ============================================= MS Windows RPC Locator Service Remote Exploit ============================================= / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: email protected Last update: 30 march 2003 / ...