3506 matches found
CVE-2001-0349
CVE-2001-0349 affects Microsoft Windows 2000, specifically the Telnet Service. The Telnet Service creates named pipes to share data between session handlers, using an algorithm to name pipes that is easily predictable, and it does not properly verify the pipe names. If a local attacker with acces...
CVE-2001-0349
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of...
CVE-2001-0350
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of...
Проблемы с telnet-сервисом Windows 2000 (predictable named pipes)
telnet service подключается к существующей named pipe без проверки каким приложением она открыта...
Проблема с отладочными регистрами в Windows 2000 (debug registers privelege elevation)
Используя отладочные регистры DR0-DR7 можно "убить" привелегированный процесс и перехватить его именованные каналы, получив системные права...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
CVE-2000-0737
The CVE-2000-0737 entry describes a vulnerability in the Windows 2000 Service Control Manager (SCM) where SCM creates predictable named pipes for system services. This behavior can be abused by a local user with console access to impersonate services and gain administrator privileges. The impact ...
Security Bulletin (MS00-053)
Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...
Уязвимость в services.exe Windows 2000
Локальный пользователь может создать приложение, которое "перехватит" именованный канал регистрируемый сервисом, таком образом получив возможность оперировать в контексте операционной системы...
Microsoft Windows Server 2000 - Named Pipes Predictability
source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...
Microsoft Windows Server 2000 - Named Pipes Predictability
Microsoft Windows Server 2000 - Named Pipes Predictability source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBoo...
CVE-1999-0851
Denial of service in BIND named via naptr...
CVE-1999-0835
CVE-1999-0835 describes a denial-of-service in BIND named caused by a buffer overflow in the rrextract routine when decoding SIG records. In particular, for T_SIG, the code computes an unsigned length and copies data with a potentially large third argument to memcpy if the computed length is malf...
CVE-1999-0849
Denial of service in BIND named via maxdname...
CVE-1999-0849
CVE-1999-0849 describes a denial-of-service condition in BIND's named component triggered by maxdname. Connected sources specify affected versions: ISC BIND
CVE-1999-0848
CVE-1999-0848 concerns a denial-of-service in ISC BIND’s named daemon caused by consuming more than the configured fdmax file descriptors. This is confirmed by the NVD entry and Red Hat security page, both citing the same DoS vector. The provided connected documents do not specify exact affected ...
PT-1999-1585 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of...