CVE-2000-0603

Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability...

CVE-2000-0603: Undefined Security Weakness

Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability...

Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)

Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service MS00-070 source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedur...

Microsoft Windows NT 4.0/2000 - LPC Zone Memory Depletion Denial of Service

source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. LPC allocates memory from...

Security Bulletin (MS00-048)

Microsoft Security Bulletin MS00-048 - --------------------------------------- Patch Available for "Stored Procedure Permissions" Vulnerability Originally Posted: July 7, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr SQL Server 7.0. The...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-2000-0070: Undefined Security Weakness

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

Microsoft Security Bulletin (MS00-028)

Microsoft Security Bulletin MS00-028 - -------------------------------------- Procedure Available to Eliminate "Server-Side Image Map Components" Vulnerability Originally Posted: April 21, 2000 Summary ======= A procedure is available to eliminate a security vulnerability affecting several web...

CVE-1999-0632

The RPC portmapper service is running...

PT-2000-1102 · Microsoft · Shtml.Dll +1

Name of the Vulnerable Software and Affected Versions: Frontpage Server Extensions affected versions not specified Description: The issue allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the / vti bin/ virtual directory. Recommendation...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

PT-1999-1585 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of...

freestats-cgi.txt

Date: Sat, 21 Nov 1998 12:54:41 -0500 From: John Carlton To: [email protected] Subject: Freestats.com CGI vulnerability About a year ago I developed an exploit for the free web stats services offered at freestats.com, and supplied the webmaster with proper code to patch the bug. After hearing ...

Portal of Doom Backdoor Detection

Portal of Doom is installed. This backdoor allows anyone to partially take the control of the remote system. An attacker may use it to steal your password or prevent your from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

PT-1999-1363 · Netscape · Netscape Directory Server

Name of the Vulnerable Software and Affected Versions: Netscape Directory Server affected versions not specified Description: The installation procedure of the Netscape Directory Server leaves sensitive information in a file that is accessible to local users. Recommendations: At the moment, there...

CVE-1999-0632

The RPC portmapper service is running...

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

Windows Management Instrumentation (WMI) Remote Command Execution

This module executes powershell on the remote host using the current user credentials or those supplied. Instead of using PSEXEC over TCP port 445 we use the WMIC command to start a Remote Procedure Call on TCP port 135 and an ephemeral port. Set ReverseListenerComm to tunnel traffic through that...

PT-1999-1236

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to the RPC portmapper service being active. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

PT-1998-1107 · Sun · Rpc.Nisd Server

Name of the Vulnerable Software and Affected Versions: NIS+ rpc.nisd server affected versions not specified Description: The issue allows remote attackers to execute certain RPC calls without authentication, potentially obtaining system information, disabling logging, or modifying caches...