CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2001-0951

Windows 2000 allows remote attackers to cause a denial of service CPU consumption by flooding Internet Key Exchange IKE UDP port 500 with packets that contain a large number of dot characters...

CVE-2003-0003

CVE-2003-0003 describes a locally/remotely exploitable buffer overflow in the Microsoft Locator service (RPC Locator) that allows arbitrary code execution when processing overly large RPC requests. Affected products include Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and...

CVE-2001-0951

CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...

CVE-2002-1230

CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...

CVE-2002-1256

The SMB signing capability in the Server Message Block SMB protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying gro...

CVE-2002-0443

Technical details about CVE-2002-0443 are not publicly available in the provided documents. The materials include the vulnerability description but do not specify affected products/versions, root cause, exploit details, or remediation.

CVE-2002-1214

CVE-2002-1214 describes a buffer overflow in Microsoft PPTP Service affecting Windows XP and Windows 2000 (and Terminal Services) that can be triggered by a PPTP control data packet with malformed data. The vulnerability can lead to a denial of service and, in some cases, may allow the attacker t...

CVE-2001-1302

CVE-2001-1302 relates to Windows 2000 where the Change Password option in the Windows Security UI can be misused to attempt to change passwords for other accounts on remote systems or to identify valid accounts via error messages. The vulnerability is attributed to a potential problem in the NetU...

CVE-2001-1347

Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes...

CVE-2001-1302

The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function...

CVE-2002-1214

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a certain PPTP packet with malformed control data...

CVE-2002-1184

The CVE-2002-1184 entry describes that the Windows 2000 system root folder has default Everyone:F permissions and is searched during login or program launch, enabling privilege escalation via Trojan horse programs. Affected software: Microsoft Windows 2000 (system root folder permissions in the s...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

Gaucho 1.4 - Mail Client Buffer Overflow

// // Gaucho Ver 1.4 Mail Client Buffer Overflow Vulnerability // Bind Shell POC Validation Code for English Win2K SP4 // 10 Aug 2004 // // Gaucho is an Email client developed by NakedSoft for Microsoft Windows // platforms. Gaucho supports SMTP, POP3 and other email delivery protocols. // Gaucho...

gaucho140poc.cpp.txt

// // Gaucho Ver 1.4 Mail Client Buffer Overflow Vulnerability // Bind Shell POC Validation Code for English Win2K SP4 // 10 Aug 2004 // // Gaucho is an Email client developed by NakedSoft for Microsoft Windows // platforms. Gaucho supports SMTP, POP3 and other email delivery protocols. // Gaucho...

RealVNC Server 4.0 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/11048/info RealVNC server is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker establishes a large amount connections to the server. This issue was reportedly tested on RealVNC 4.0 running on...

RealVNC Server 4.0 - Remote Denial of Service

RealVNC Server 4.0 - Remote Denial of Service // source: https://www.securityfocus.com/bid/11048/info RealVNC server is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker establishes a large amount connections to the server. This issue was...

[NGSEC-2004-6] IPD, local system denial of service.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: IPD, local system denial of service. ID: NGSEC-2004-6 Application: IPD up to 1.4 http://www.pedestalsoftware.com/ Date: 14/Aug/2004 Status: Vendor contacted on...

OllyDbg 1.10 - Format String

// Exploit opens a new cmd.exe.Tested on win2ken+sp4en+ollydbg v1.09d // Open exploit with ollydebug and run the exploit from ollydebugF9 key. // Coded by Ahmet Cihana.k.a. hurby // Thanx to r3db4r0n, Murat Erdo??ana.k.a. Stormwr, Onur Cihana.k.a.eurnie and 3710336, Orhan Tun????z and Mehmet Yaku...