MS00-020:Windows 2000 Windows Station 非法访问漏洞

如果用户本地登录到一台Windows 2000机器，在某些特定条件下，可以获得对其他用户的widnows stations进程的访问权限。这个问题将允许一个低级别的用户的进程看到同一个session中另外一 个桌面的输入或输出数据，这可能包含口令等敏感信息。 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server - Microsoft Windows 2000 Advanced Server 微软已经发布了一个相应的补丁程序，您可以在下列地址下载： -...

Microsoft ISA Server H.323 Gatekeeper内存泄漏漏洞(MS01-045)

BUGTRAQ ID: 3196 CVECAN ID: CVE-2001-0546 Microsoft ISA Server中所带的一个服务：H.323 Gatekeeper存在一个拒绝服务漏洞，这 个服务支持"voice-over-IP"数据通过ISA防火墙传输。它包含一个内存泄漏问题，当发送 特定类型的畸形H.323数据时就会触发内存泄漏。如果攻击者持续发送大量的畸形数据， 就可以消耗大量的服务器内存，并使性能严重下降以至中止所有通过防火墙的通信。 Microsoft ISA Server 2000 - Microsoft Windows 2000...

Microsoft IIS 5.0 WebDAV拒绝服务漏洞(MS01-044)

CVE CAN ID : CAN-2001-0508 Microsoft IIS 5.0 WebDAV处理中存在一个拒绝服务漏洞，远程攻击者可以临时中断IIS 5.0服务。 WebDAV没有正确的处理特定类型的请求，特别是请求相当长而且其中包含某种 类型的无效数据时。这会导致内存访问错误，从而使得IIS 5.0进程中断。由于缺省情况 下，IIS 5.0会自动重启。因此这只会临时中断IIS服务。 Microsoft IIS 5.0 - Microsoft Windows 2000 厂商补丁： 微软已经为此发布了一个安全公告（MS01-044）以及相应补丁程序：...

Microsoft Internet Explorer New ActiveX对象字符串串联内存破坏漏洞

BUGTRAQ ID: 30219 CNCAN ID：CNCAN-2008071510 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer new ActiveX对象处理存在内存破坏，远程攻击者可以利用漏洞对程序进行拒绝服务攻击，可能导致任意代码执行。 构建使用New ActiveX对象字符串的串联，当Internet Explorer解析时可导致应用程序崩溃，通过使用Javascript aka heapspray填充内存的方法可控制堆，导致以应用程序权限执行任意指令。 Microsoft...

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing (953230)

Microsoft Security Bulletin MS08-037 – Important Vulnerabilities in DNS Could Allow Spoofing 953230 Published: July 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Windows Domain Name System DNS that could allo...

Design/Logic Flaw

Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to accepting "records from a response that is outside the remote server's authority," aka "DNS Cache...

Microsoft SQL Server Convert Function Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code and completely compromise affected computers. Failed attacks...

Microsoft SQL Server Memory Page Reuse Information Disclosure Vulnerability

Description Microsoft SQL Server is prone to an information-disclosure vulnerability caused by a memory-reallocation flaw. An attacker with operator access may leverage this issue to obtain potentially sensitive information that could aid in further attacks. Technologies Affected Microsoft Data...

Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service (953235)

Microsoft Security Bulletin MS08-035 – Important Vulnerability in Active Directory Could Allow Denial of Service 953235 Published: June 10, 2008 | Updated: June 11, 2008 Version: 1.1 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Memory corruption

The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."...

CVE-2008-1444

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...

CVE-2008-1444

Stack-based buffer overflow in Microsoft DirectX 7.0 and 8.1 on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a Synchronized Accessible Media Interchange SAMI file with crafted parameters for a Class Name variable, aka the "SAMI Format Parsing Vulnerability."...

ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability

ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-040 -- CVE ID: CVE-2008-1444 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2000 SP4 -- TippingPointTM IPS Customer Protection:...

Microsoft Security Bulletin MS08-033 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution (951698)

Microsoft Security Bulletin MS08-033 – Critical Vulnerabilities in DirectX Could Allow Remote Code Execution 951698 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft DirectX that could allo...

Microsoft Security Bulletin MS08-031 - Critical Cumulative Security Update for Internet Explorer (950759)

Microsoft Security Bulletin MS08-031 - Critical Cumulative Security Update for Internet Explorer 950759 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves one privately reported and one publicly disclosed vulnerability. The privately reported...

Black Ice Software Annotation Plugin - 'BiAnno.ocx' Remote Buffer Overflow

-------------------------------------------------------------------------- Black Ice Software Annotation Plugin BiAnno.ocx Remote Buffer Overflow url: http://www.blackice.com File : BiAnno.ocx Ver. : 10.9.5.0 CLSID: B27DC3CE-FF81-4DCF-9B80-0E69D61BED2A Mark.: RegKey Safe for Script: True RegKey...

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

No description provided by source. ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl ip port DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...

MS Windows 2000 WINS Remote Code Execution Exploit

No description provided by source. // / ZUCWins 0.1 - Wins 2000 remote root exploit / / Exploit by: zuc [email protected] / / works on Windows 2000 SP3/SP4 probably every language / // include stdio.h...

Serv-U FTPD 3.x/4.x "SITE CHMOD" Command Remote Exploit

No description provided by source. / ----------------------------------------------------------------------- Servu.c - Serv-U FTPD 3.x/4.x "SITE CHMOD" Command Remote stack buffer overflow exploit Copyright C 2004 HUC All Rights Reserved. Author : lion : [email protected]...

WinVNC Web Server GET Overflow

This module exploits a buffer overflow in the AT WinVNC version 'WinVNC Web Server GET Overflow', 'Description' = %q This module exploits a buffer overflow in the AT&T WinVNC version 'aushack', 'License' = MSFLICENSE, 'References' = 'BID', '2306' , 'OSVDB', '6280' , 'CVE', '2001-0168' , ,...