Уязвимость в NT - относительнный путь к оболочке пользователя.

По-умлочанию explorer.exe ищется в корневой директории системного раздела, что позволяет подменить его и таким образом запустить приложение с правами другого пользователя...

Alert: Buffer Overrun is O'Reilly WebsitePro httpd32.exe (CISADV000717)

Cerberus Information Security Advisory CISADV000717 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 17th July 2000 Name : Website Pro GET buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : David Litchfie...

Alert: Buffer Overrun is O'Reilly WebsitePro webfind.exe (CISADV000718)

Cerberus Information Security Advisory CISADV000718 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 18th July 2000 Name : Website Pro webfind.exe buffer overflow Affected Systems : Windows NT running Website Pro 2.4 Issue : Remote attackers can execute arbitrary code Author : Robert...

DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 =============================== Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases...

webactive.txt

Application: ITAfrica's WEBactive version 1.00 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/NT Vendor Status: Not Informed, Project discontinuedI think Download URL: ftp://ftp.mira.net/mirrors/winsock-l/Windows95/Daemons/HTTPD/activ100.zip Product...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases download any file known by name an...

FS-071000-5-JWS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Sun's Java Web Server ---------------------------------------------------------------------- FS Advisory ID: FS-071000-5-JWS Release Date: July 10, 2000 Product: Java Web Server Vendor: Sun Microsystems...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...

CVE-2000-0403

CVE-2000-0403 affects the CIFS Computer Browser service on Windows NT 4.0. The vulnerability allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables (HostAnnouncement Flooding/HostAnnouncement Frame). The connected ...

CVE-2000-0331

Buffer overflow in Microsoft command processor CMD.EXE for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability...

CVE-2000-0403

The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability...

CVE-2000-0544

Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length...

CVE-2000-0544

CVE-2000-0544 affects Windows NT and Windows 2000 hosts due to malformed DCE/RPC SMBwriteX requests carrying an invalid data length, enabling a remote attacker to cause a denial of service. The connected Nessus plugin MS00-066 indicates a patch (hotfix Q272303) addressing this issue; the descript...

CVE-2000-0377

CVE-2000-0377 affects Windows NT 4.0 Remote Registry server. A malformed remote registry request allows locally authenticated users to cause a denial of service by triggering winlogon.exe to fail, effectively rendering the system unstable. Exploitation is reported to be possible over the network ...

CVE-2000-0377

The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability...

CVE-2000-0544: Undefined Security Weakness

Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length...

CVE-2000-0305: Undefined Security Weakness

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...

CVE-2000-0331: Undefined Security Weakness

Buffer overflow in Microsoft command processor CMD.EXE for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability...

CVE-2000-0377: Undefined Security Weakness

The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability...