Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

Flaw in Certificate Enrollment Control (Q323172)

A vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to delete digital certificates on a user's system via HTML. Impact of vulnerability: Denial of...

Buffer Overflow in Windows Troubleshooter ActiveX Control (826232, MS03-042)

A security vulnerability exists in the Microsoft Local Troubleshooter ActiveX control in Windows 2000. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ASP/ASA source using Microsoft Translate f: bug - Active Check

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username SPDX-FileCopyrightText: 2000 Alexander Strouk Some text descriptions might be...

Windows Network Manager Privilege Elevation (Q326886)

A flaw in the Windows 2000 Network Connection Manager could enable privilege elevation. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Opening Group Policy Files (Q318089)

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Attacker could block application of Group Policy Affected Software: Microsoft Windows 2000 Server Microsoft Windows 2000 Advanced Server Microsoft...

MUP overlong request kernel overflow Patch (Q311967)

Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...

Microsoft RDP flaws could allow sniffing and DOS (Q324380)

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. SPDX-FileCopyrightText: 2002 SECNAP Network Security, LLC Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

w3who.dll Buffer Overflow / XSS Vulnerability - Active Check

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. The scanner has determined that this file is installed on the remote host. SPDX-FileCopyrightText: 2004 Nicolas Gregoire Some text descriptions...

Buffer Overflow in Windows Troubleshooter ActiveX Control (826232)

A security vulnerability exists in the Microsoft Local Troubleshooter ActiveX control in Windows 2000. The vulnerability exists because the ActiveX control Tshoot.ocx contains a buffer overflow that could allow an attacker to run code of their choice on a user's system. To exploit this...

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Hotfix to fix Unchecked Buffer in PPTP Implementation Q329834 is not installed. A security vulnerability results in the Windows 2000 and Windows XP implementations because of an unchecked buffer in a section of code that processes the control data used to establish, maintain and tear down PPTP...

Unchecked Buffer in Windows Help(Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user's system. Maximum Severity Rating: Critical Recommendation: Customers should install the patch immediately. Affected Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows...

Microsoft RDP flaws could allow sniffing and DOS(Q324380)

Remote Data Protocol RDP version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, and Remote Data Protocol RDP version 5.1 in Windows ...

Opening Group Policy Files (Q318089)

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

WM_TIMER Message Handler Privilege Elevation (Q328310)

A security issue has been identified in WMTIMER that could allow an attacker to compromise a computer running Microsoft Windows and gain complete control over it. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

ASP/ASA source using Microsoft Translate f: bug

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. OpenVAS Vulnerability Test $Id: translatef.na...