3801 matches found
CVE-2002-0724: Undefined Security Weakness
Buffer overflow in SMB Server Message Block protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service crash via a SMBCOMTRANSACTION packet with a request for the 1 NetShareEnum, 2 NetServerEnum2, or 3 NetServerEnum3, aka "Unchecked Buffer in...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2002-0725
CVE-2002-0725 affects NTFS on Windows NT 4.0 and Windows 2000. Local attackers can hide file usage by creating a hard link to the target file, causing the link to be recorded in the audit trail instead of the target. Root cause involves the NTFS auditing reporting hard links. Impact is local, wit...
CVE-2002-0725: Improper Link Resolution Before File Access
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2002-0421
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including 1 aexp2.htr, 2 aexp2b.htr, 3 aexp3.htr , or 4 aexp4.htr...
Citrix Metaframe for Windows NT 4.0 TSE 1.8 - Java ICA Environment Denial of Service
Citrix Metaframe for Windows NT 4.0 TSE 1.8 - Java ICA Environment Denial of Service source: https://www.securityfocus.com/bid/5439/info Citrix Metaframe is a commercial available remote desktop application. This issue affects Metaframe on the Microsoft Windows platform. It has been discovered th...
Crashing any Windows NT TSE running MetaFrame 1.8
PreScriptum: I posted this at thin-world.community.everyone.net first. -------------------------------------------------------------------------------- I tried to contact Citrix about this bug i found, but they warn't interested. Haven't heared from them. So i'm posting it on a public forum for...
CVE-2002-0366
Buffer overflow in Remote Access Service RAS phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server RRAS allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry...
CVE-1999-1362
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...
CVE-2002-0018
In Windows NT/Windows 2000, a domain trust relationship can be abused when a trusting domain accepts authorization data (SIDs) from a trusted domain without verifying that the trusted domain is authoritative for all SIDs. The root cause is failure to validate all SIDs in the authorization data su...
CVE-2002-0367
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit...
CVE-2002-0018: Undefined Security Weakness
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by...
CVE-2002-0367
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit. Recent assessments:...
CVE-1999-1362: Undefined Security Weakness
Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...
Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting
Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows ...
Microsoft RASAPI32.DLL
NGSSoftware Insight Security Research Advisory Name: Buffer Overflow in Microsoft Rasapi32.dll Systems Affected: WinNT, Win2K, XP, Microsoft Routing And Remote Access Server "Steelhead" Severity: High Category: Buffer Overrun / Privilege Escalation Vendor URL: http://www.microsoft.com/ Author: Ma...
Cisco Secure ACS for Windows NT 3.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows NT platform. It has been discovered that the web server...
CVE-2002-0421: Undefined Security Weakness
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including 1 aexp2.htr, 2 aexp2b.htr, 3 aexp3.htr , or 4 aexp4.htr...
CVE-2002-0419: Exposure of Sensitive Information to an Unauthorized Actor
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...