Symantec Norton Ghost本地溢出及信息泄露漏洞

Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的服务管理器实现上存在缓冲区溢出漏洞，如果攻击者能够向Norton Ghost的服务管理器中的函数提供超长字符串的话，就可能触发缓冲区溢出，导致以系统级权限执行任意指令。 Norton...

In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net

Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station adjacent to the machine's file share successfully upload the cmd. exe file,...

CVE-2005-1577

The CVE-2005-1577 entry concerns APG Technology ClassMaster, where an improper restriction of access to sensitive folders enables remote attackers to reach those folders over a network share. The NVD notes a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, and partial ...

CVE-2005-1577

APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share...

CVE-2005-0923

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0923

Symantec Norton AntiVirus 2004/2005 (including Internet Security 2004/2005 and System Works 2004/2005) contains a DoS vulnerability in the Auto-Protect module’s SmartScan feature. Renaming a file on a network share can trigger excessive CPU usage, leading to a system hang or crash. The issue affe...

CVE-2004-0480

Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...

PT-2004-1599 · Ibm · Ibm Lotus Notes

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions 6.0.3 through 6.5 Description: The issue allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Thi...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

Security Bulletin MS02-045: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)

---------------------------------------------------------------------- Title: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service Q326830 Date: 22 August 2002 Software: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows NT 4.0 Server,...

CVE-2001-1110

CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-0264

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

iis-enumerate.txt

I was recently auditing the security on one of my web servers when I cameacross a new Extension Enumerate Root Web Server Directory Vulnerability forIIS 4.0. Going to the main website and asking for anything.idq I get thepage cannot be found. But if the files for the web server reside on a sharet...

CVE-1999-1246

Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges...

PT-1999-1177 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A system-critical NETBIOS/SMB share has inappropriate access control. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-1997-1147 · Microsoft · Windows 95

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A NETBIOS/SMB share password is guessable. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Q326830: Security Update (Windows 2000)

This update resolves the "Unchecked Buffer in Network Share Provider can lead to Denial of Service" vulnerability in Windows 2000. Download now to help prevent a malicious user from launching a denial of service DoS attack on your computer...