CVE-1999-1170

IPswitch IMail vulnerability enables local privilege escalation by setting the registry key flags to 1920. The issue allows a local user to gain additional privileges and modify or add mail accounts, by manipulating the flags value in the registry. Affected versions are not specified in the provi...

CVE-1999-1171

IPswitch WSFTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...

CVE-1999-1171

IPswitch WS_FTP contains a local privilege escalation flaw: by setting the flags registry key to 1920, a local user can gain additional privileges and modify or add mail accounts. The PT-1999-1600 entry confirms this issue but does not specify affected versions, and the original CVE description m...

CVE-2000-1164

The CVE-2000-1164 issue affects WinVNC, specifically the WinVNC3 registry key HKLM\Software\ORL\WinVNC3. The root cause is weak permissions that grant read/modify access to the Everybody group (and in some contexts to non-admin users), allowing extraction or alteration of the VNC password and oth...

CVE-2000-1164

WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...

CVE-2000-0650

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

CVE-2001-0315

CVE-2001-0315 affects mIRC 5.7. The vulnerability arises from the locking feature, where local users can bypass the password mechanism by modifying the LockOptions registry key. Exploitation requires local access; the CVSS base score is 7.5 (HIGH) with partial impacts to confidentiality, integrit...

CVE-2001-0315

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...

CVE-2001-0046

CVE-2001-0046 involves a registry permissions weakness in Windows NT 4.0 where the key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users outside the admin group. This write access enables an unprivileged (non-admin) user to gain additional privileges, constituting a ...

Microsoft Windows SMB Registry : NT RAS Administration Registry Key Permission Weakness Local Privilege Escalation

This script checks whether the following key can be modified by non-admins : HKLM\Software\Microsoft\Windows\RAS Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10567;...

Проблемы с WinVNC

Создаваемый ключ в реестре содержит пароли администрирования и позволяет редактирование пользователем. Пароли хранятся в обратимом виде...

Microsoft Windows SMB Registry : WinVNC's Key Permissions

The registry key HKLM\Software\ORL\WinVNC3 is writeable and/or readable by users who are not in the admin group. This key contains the VNC password of this host, as well as other configuration setup. As this program allows remote access to this computer with the privileges of the currently logged...

WinVNC 3.3.x

So, you use WinVNC and Windows NT4 Workstation/Server...? During the InstallShield setup utility, it creates the registry key: HKEYLOCALMACHINESoftwareORLWinVNC3 which is used to store all of WinVNC's default settings. By default, Administrator and SYSTEM have full control, and Everybody has...

Registry Permissions reminder - local privilege escalation on Windows NT

Howdy all, The generic security issue of lax permissions on registry keys under Windows NT 4 has been known for sometime see Stephen Sutton's Windows NT Security Guidelines http://www.trustedsystems.com/tssnsaguide.htm but here's a "new" curtly reminder of why it is so important to do so. Local...

CVE-2000-0802

The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR...

Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection

By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...

CVE-2000-0605

Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...

Microsoft Windows SMB Registry : Winreg Registry Key Detection

The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg is missing. This key allows you to define what can be viewed in the registry by non administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10431; scriptversion"$Revision: 1.31 $";...

Microsoft Windows SMB Registry : Remote PDC/BDC Detection

The remote host seems to be a Primary Domain Controller or a Backup Domain Controller. This can be verified by the value of the registry key 'ProductType' under 'HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions'. C Tenable Network Security, Inc. include"compat.inc"; if description...