McAfee VirusScan 4.5 Unquoted ImagePath Vulnerability

Description The default installation of McAfee VirusScan excludes quotes around the image path eg. ImagePath=C:\Program Files\Common Files\Network Associates\McShield\McShield.exe. Therefore, if a malicious user were to insert a hostile VB executable file named common.exe in C:\Program Files, it...

CVE-2000-0146

The CVE-2000-0146 issue affects the Java Server in Novell GroupWise Web Access Enhancement Pack. A remote attacker can cause a denial of service by sending an excessively long URL to the servlet, leading to availability impact. Connected sources corroborate a URL-length-based DoS vector (e.g., lo...

Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection

By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...

RE: Re[3]: Possible Exchange 5.5 Server DoS [msrc 421]

Hello 3APA3A, Thanks again for your note. Due to the timeframe of Exchange SP4 we will including a fix for this issue in that Service Pack. If you want any future status on this issue please refer to MSRC 421. Regards, [email protected] -----Original Message----- From: 3APA3A...

Watchguard Firebox Authentication DoS

Watchguard Firebox Authentication DoS Advisory Code: VIGILANTE-2000005 Release Date: August 15, 2000 Systems Affected: Tested on the newest version of the Watchguard Firebox II that was on the 22nd of June, but it is very likely that this bug exists in all prior versions that include the...

VIGILANTE-2000005.txt

Watchguard Firebox Authentication DoS Advisory Code: VIGILANTE-2000005 Release Date: August 15, 2000 Systems Affected: Tested on the newest version of the Watchguard Firebox II that was on the 22nd of June, but it is very likely that this bug exists in all prior versions that include the...

Remote Denial Of Service -- NetWare 5.0 with SP 5

Remote Denial Of Service -- NetWare 5.0 with SP 5 -------------------------------------------------------------- I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After few minutes after the attack server issue a memory allocation error. 10-07-2000 12:29:53 pm: SERVER-5.0-4631...

CVE-2000-0402

CVE-2000-0402 concerns Information Disclosure in Microsoft SQL Server 7.0: the sa password is stored in plaintext in a log file (sqlsp.log) readable by any user. This vulnerability is described as the "SQL Server 7.0 Service Pack Password" issue. Public references in the provided documents point ...

Novell Netware 5.0 SP5/6.0 SP1 - SMDR.NLM Denial of Service

source: https://www.securityfocus.com/bid/1467/info When Novell Netware is configured with IPX-Compatibility enabled, it is vulnerable to a denial of service attack by sending packets with random data to port 40193. Similar results are possible by sending fragmented packets. This has been observe...

CProxy v3.3 SP 2 DoS

Last day I found a vulnerability in CProxy while I was testing it to install in a host server in one office... Here is the test that demonstrate the existence of the bug / Remote Denial of Service for CProxy v3.3 - Service Pack 2 C |TDP| - HaCk-13 TeaM - 2000 [email protected] This program xploits a...

stream3 flood attack

Topic: Windows NT/2000 DoS via stream3 flood attack Authors: Dark Zorro , Error Date: 2 December 2000 yes... it's old Vendor Informed: 2 December 2000 Software affected: Windows NT 4.0, Windows 2000 Risk: Low Remote: Yes Exploitable: Yes SECURITY.NNOV advisories:...

Microsoft Windows SMB Registry : NT4 Service Pack Version Detection

Nessus was able to determine the Service Pack version of the Windows NT system by reading the following registry key : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10401; scriptversion"1.56";...

MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability

Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service source: https://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up al...

poorman.txt

Missing traling '/' Remote Denial of Service Attack Advisory february 5th 2000 UPDATED February 8th Please, refer to http://bebugs.be.com/devbugs/detail.php3?oid=1229984 as it makes this advisory obsolete... I discovered this very recently, but it seems it was in the Be inc. bug database for a...

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service

source: https://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up all available CPU resource, or to stop the post office service. The server wi...

CVE-1999-0662

A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete...

CVE-1999-0662

CVE-1999-0662 is described in the connected docs as an “Outdated or incorrect version” issue affecting multiple vendors. The Red Hat/F5 entries confirm it is a patch-related vulnerability tied to outdated service packs or non-up-to-date software, with F5 listing explicit vulnerable version ranges...

March 2, 2021, update for Outlook 2013 (KB4493174)

March 2, 2021, update for Outlook 2013 KB4493174 This article describes update 4493174 for Microsoft Outlook 2013 that was released on March 2, 2021. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

February 2, 2021, update for Office 2010 (KB4493180)

February 2, 2021, update for Office 2010 KB4493180 This article describes update 4493180 for Microsoft Office 2010 that was released on February 2, 2021.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't apply...