2982 matches found
[SNS Advisory No.40] TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability
---------------------------------------------------------------------- SNS Advisory No.40 TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability Problem first discovered: 21 Aug 2001 Published: Fri, 24 Aug 2001...
SEDUM HTTP Server Long HTTP Request Overflow DoS
It was possible to make the remote web server crash by sending it too much data. An attacker may use this flaw to prevent this host from fulfilling its role. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10637; scriptversion"1.25"; scriptcvsdate"Date: 2018/07/27...
Security Bulletin MS01-010
---------------------------------------------------------------------- Title: Patch Available for "Windows Media Player Skins File Download" Vulnerability Date: February 14, 2001 Software: Windows Media Player 7 Impact: Run arbitrary code Bulletin: MS01-010 Microsoft encourages customers to...
GoAhead Web Server Directory Traversal Vulnerability
Hello! We have found a bug in the GoAhead WebServer, v.2.0 and v.2.1. Attacker can get any file from the drive, where web-server was installed. try follow request http://www.somehost.com/............autoexec.bat This vulnerability may allow an attacker to execute code with the privileges of the...
Microsoft Indexing Service (Windows 2000NT 4.0) - .htw Cross-Site Scripting
Microsoft Indexing Service Windows 2000NT 4.0 - .htw Cross-Site Scripting source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly...
Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service
source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to spike to 100% and any existing...
DST2K0039: Webteachers Webdata: Importing files lower than web ro ot possible in to database
All, We have released the following advisory due to the fact that we have provided a patch Section II. If people require any help with implementing this patch please come back to us on the following e-mail address [email protected]. This patch may require a little tinkering with for you...
Microsoft Windows NT 4.02000 - Spoofed LPC Request (MS00-003)
Microsoft Windows NT 4.02000 - Spoofed LPC Request MS00-003 source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by...
MS00-047: NetBIOS Name Server Protocol Spoofing patch (269239)
The hotfix for the 'NetBIOS Name Server Protocol Spoofing' problem has not been applied. This vulnerability allows a malicious user to make this host think that its name has already been taken on the network, thus preventing it from functioning properly as an SMB server or client. C Tenable Netwo...
bigbrother-1.4g.txt
/ Big Brother Exploit For ALL Versions prior to v.1.4h Desc: View the contents of any file on the remote system. Including /etc/passwd. Contributions: Identified and Proof of Concept by [email protected] and Loki LoA Greets and shouts to: smile, Vastervik, Self, alucard, RootHat, Lammie The...
Security Bulletin (MS00-032)
Microsoft Security Bulletin MS00-032 - -------------------------------------- Patch and Tool Available for "Protected Store Key Length" Vulnerability Originally Posted: June 01, 2000 Summary ======= Microsoft has released a patch and a tool that eliminate a security vulnerability in Microsoftr...
Заткнута очередная дырка в IIS
Используя строку с большим количеством ESC-символов xx можно существенно замедлить работу сервера IIS или даже вывести его из строя на некоторое время...
Security Bulletin (MS00-023)
Microsoft Security Bulletin MS00-023 - -------------------------------------- Patch Available for "Myriad Escaped Characters" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information...
MS99-059: Microsoft SQL Server Crafted TCP Packet Remote DoS (uncredentialed check)
The remote Microsoft SQL server can be shut down when it is sent a TCP packet containing more than 2 NULLs. An attacker may use this problem to prevent it from being used by legitimate clients, thus threatening your business. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
cert-tcpip-DoS.txt
Date: Wed, 23 Dec 1998 15:51:42 -0800 From: David Schwartz Reply-To: Bugtraq List To: [email protected] Subject: Re: CERT Advisory CA-98.13 - TCP/IP Denial of Service The following text is in the "Windows-1252" character set. Your display is set for the "US-ASCII" character set. Some character...
hotmail.browser.trust.txt
Date: Wed, 5 May 1999 17:31:34 -0500 From: David L. Nicol To: [email protected] Subject: hotmail claims vulnerability patched, so here it is Dear Paul: I am reading your previous article on hotmail security, http://www.news.com/News/Item/0,4,33996,00.html and I'm CCing this message to the...
faxsurvey.txt
Date: Tue, 4 Aug 1998 07:41:24 -0700 Reply-To: [email protected] From: Tom Subject: remote exploit in faxsurvey cgi-script Hi! There exist a bug in the 'faxsurvey' CGI-Script, which allows an attacker to execute any command s/he wants with the permissions of the HTTP-Server. All the attacker has t...
FreeBSD-SA-96:18.lpr
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:18 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in lpr revised Category: core Module: lpr Announced: 1996-11-25 Affects: FreeBSD 2.0, 2.0.5, 2.1, 2.1.5...
