3801 matches found
WFTPD 3.0 - RETR CWD Remote Buffer Overflow
WFTPD 3.0 - RETR CWD Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attack...
WFTPD 3.0 - 'RETR' / 'CWD' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2644/info Invalid long strings submitted using either 'RETR' or 'CWD' commands to a host running WFTPD server, will result in the service terminating due to a buffer overflow. It may be possible for an attacker to execute arbitrary code through this...
Oracle8 denial of service
Hi! Attached is a little perl-script, which makes TNSLSNR80.EXE consume all available cpu-time so the computer becomes unusable. It works on Oracle 8 servers running Windows NT 4.0 SP6 and does not require any authentication credentials to succeed. I have not tried it on any other versions or...
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service (1)
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service 1 // source: https://www.securityfocus.com/bid/3967/info An issue exists in Windows which could cause the TCP stack to consume all available system memory. This is achieved if a user sends numerous empty TCP packets to a host on port 139...
[LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more.
PRODUCT: IBM Websphere/NetCommerce3 vERSION: 3.1.2 , posibly others Unix, and NT +PATH REVEALING PROBLEM Exploit: http://host/cgi-bin/ncommerce3/ExecMacro/macro.d2w/NOEXISTINGHTMLBLOCK Result: DTWP029E: Net.Data is unable to locate the HTML block NOEXISTINGHTMLBLOCK in file...
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (1)
// source: https://www.securityfocus.com/bid/3967/info An issue exists in Windows which could cause the TCP stack to consume all available system memory. This is achieved if a user sends numerous empty TCP packets to a host on port 139. Successful exploitation of this vulnerability could render t...
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (2)
// source: https://www.securityfocus.com/bid/3967/info An issue exists in Windows which could cause the TCP stack to consume all available system memory. This is achieved if a user sends numerous empty TCP packets to a host on port 139. Successful exploitation of this vulnerability could render t...
Possible IE5.0 exposure of local environment variables
I ran across this today, anyone have any thoughts? I'm using a moderately patched IE 5.0 browser on NT 4.0 SP5 workstation. Couldn't find any reference to this in the archives, but maybe it's been covered before. I type in the url www.home.com/computername & press enter, then and IE actually...
Savant 3.0 Denial Of Service
Not exactly sure what the problem is because it will handle the same request from a program that does the same thing. "Time is a factor" so pay attention man ;P Connect to the server using telnet or somthing and type in the following: GET / HTTP/1.1 Host:AAAAAAAAAAAAAAAAAAAA..... Where A x 260, h...
602Pro Lan Suite Denial Of Service
This problem was found with Version 2000A build 2000.1.0.35 latest version. The problem is effective locally and remotely on NT-4 and Windows 98.I haven't tested others. I dont have anything fancy to say about it really. Just somthing that was overlooked by the developers as was the last problem...
CVE-2001-0281
CVE-2001-0281 concerns a format-string vulnerability in the DbgPrint debugging function used by some Windows NT drivers (potentially via DebugMessage). The flaw could allow local attackers to gain privileges. Documents identify the affected component as Windows NT drivers and the vulnerability as...
CVE-2001-0281
Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers possibly when called through DebugMessage, may allow local users to gain privileges...
ecurity Advisory(CSA-200111)
Topic: Resin 1.2. & 1.3b1 Javabean file disclosure vulnerability vulnerable: ============= winnt/2000maybe other operating system also +Resin 1.2. +Resin 1.3b1 discussion: =========== A security vulnerability has been found in Windows NT/2000 systems that have Resin 1.2. or Resin 1.3b1 installed...
CVE-2001-0281: Undefined Security Weakness
Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers possibly when called through DebugMessage, may allow local users to gain privileges...
Security Advisory(CSA-200110)
Topic:Tomcat 4.0-b2 for winnt/2000 show ".jsp" source Vulnerability. vulnerable: winnt/2000maybe for other operating system also + Tomcat 4.0-b2 discussion: A security vulnerability has been found in Windows NT/2000 systems that have Tomcat 4.0-b2 installed. The vulnerability allows remote...
CHINANSL Security Advisory(CSA-200105)
Topic: Tomcat 3.0 for win2000 Directory traversal Vulnerability vulnerable: Tomcat 3.0 for win2000 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have Tomcat 3.0 installed.The vulnerability allows remote attackers to acce...
Apache Tomcat 3.0 - Directory Traversal
Apache Tomcat 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with...
Apache Tomcat 3.0 - Directory Traversal
source: https://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with specially chosen characters in requested URL...
ADVISORY SSRT0715 Compaq Management Software Potential Security Vulnerability
The important part of this for this list is the impact and solution available for NT even though it's lengthy and covers all affected platforms. regards -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SOFTWARE SECURITY RESPONSE TEAM Compaq Global Services - Compaq Computer Corporation Send Security...
