482 matches found
CVE-2001-0315
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...
CVE-2001-0046
CVE-2001-0046 involves a registry permissions weakness in Windows NT 4.0 where the key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users outside the admin group. This write access enables an unprivileged (non-admin) user to gain additional privileges, constituting a ...
Microsoft Windows SMB Registry : NT RAS Administration Registry Key Permission Weakness Local Privilege Escalation
This script checks whether the following key can be modified by non-admins : HKLM\Software\Microsoft\Windows\RAS Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10567;...
Проблемы с WinVNC
Создаваемый ключ в реестре содержит пароли администрирования и позволяет редактирование пользователем. Пароли хранятся в обратимом виде...
Microsoft Windows SMB Registry : WinVNC's Key Permissions
The registry key HKLM\Software\ORL\WinVNC3 is writeable and/or readable by users who are not in the admin group. This key contains the VNC password of this host, as well as other configuration setup. As this program allows remote access to this computer with the privileges of the currently logged...
WinVNC 3.3.x
So, you use WinVNC and Windows NT4 Workstation/Server...? During the InstallShield setup utility, it creates the registry key: HKEYLOCALMACHINESoftwareORLWinVNC3 which is used to store all of WinVNC's default settings. By default, Administrator and SYSTEM have full control, and Everybody has...
Registry Permissions reminder - local privilege escalation on Windows NT
Howdy all, The generic security issue of lax permissions on registry keys under Windows NT 4 has been known for sometime see Stephen Sutton's Windows NT Security Guidelines http://www.trustedsystems.com/tssnsaguide.htm but here's a "new" curtly reminder of why it is so important to do so. Local...
CVE-2000-0802
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR...
Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection
By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...
CVE-2000-0605
Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...
Microsoft Windows SMB Registry : Winreg Registry Key Detection
The registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg is missing. This key allows you to define what can be viewed in the registry by non administrators. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10431; scriptversion"$Revision: 1.31 $";...
Microsoft Windows SMB Registry : Remote PDC/BDC Detection
The remote host seems to be a Primary Domain Controller or a Backup Domain Controller. This can be verified by the value of the registry key 'ProductType' under 'HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions'. C Tenable Network Security, Inc. include"compat.inc"; if description...
Microsoft Windows SMB Registry : NT4 Service Pack Version Detection
Nessus was able to determine the Service Pack version of the Windows NT system by reading the following registry key : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10401; scriptversion"1.56";...
CVE-2000-0259
The CVE describes a permission misconfiguration in Windows NT 4.0 related to the Cryptography\Offload registry key used by OffloadModExpo. The default permissions allow local users to access cryptographic keys of other users, enabling compromise of confidentiality and integrity of those keys. No ...
CVE-1999-0589
CVE-1999-0589 is associated with insecure permissions on system-critical Windows NT registry keys. Connected advisories identify multiple registry keys that are writable by non-admin users, enabling potential privilege escalation to SYSTEM: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlog...
CVE-1999-0664
Technical details about CVE-1999-0664 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.
CVE-1999-0611
A system-critical Windows NT registry key has an inappropriate value...
CVE-1999-0611
Technical details about CVE-1999-0611 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are disclosed. Monitor for updates.