Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (MS00-040) (2)

source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting the machine would be required in...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (1)

// source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting the machine would be required i...

CVE-2000-0544

Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-1999-0225

CVE-1999-0225 affects Windows NT 4.0. The vulnerability arises in the SMB logon handling where the actual data size does not match the size specified, enabling remote DoS. Connected documents corroborate the same description without adding new technical specifics, affected component is SMB logon ...

CVE-2000-0328

CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

CVE-1999-0225

Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size...

DST2K0007.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0008.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

CVE-1999-0225: Undefined Security Weakness

Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size...

CVE-2000-0328: Undefined Security Weakness

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0009.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 31/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

MS00-036: NT ResetBrowser frame & HostAnnouncement flood patch (262694)

The hotfix for the 'ResetBrowser Frame' and the 'HostAnnouncement flood' has not been applied. The first of these vulnerabilities allows anyone to shut down the network browser of this host at will. The second vulnerability allows an attacker to add thousands of bogus entries in the master browse...

CISADV000524a.txt

Cerberus Information Security Advisory CISADV000524a http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Rockliffe Mailsite Buffer Overflow Affected Systems : Windows NT running MailSite-HTTPMA/4.2.1.0 Issue : Remote attackers can execute arbitrary code Author : Dav...

Alert: PDG Cart Overflows

Cerberus Information Security Advisory CISADV000525 http://www.cerberus-infosec.co.uk/advisories.html Released : 25th May 2000 Name : PDGSoft Shopping Cart buffer overflows Affected Systems : UNIX/NT Web servers with PDGSoft's Cart. Issue : Remote attackers can execute arbitrary code Description...

DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 08/05/2000 [email protected]...

Security Bulletin (MS00-036)

Microsoft Security Bulletin MS00-036 - -------------------------------------- Patch Available for "ResetBrowser Frame" and "HostAnnouncement Flooding" Vulnerabilities Originally posted: May 25, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities, one...