3268 matches found
CVE-2004-0212
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an...
CVE-2004-0213
CVE-2004-0213 - Windows 2000 Utility Manager Privilege Elevation : The flaw occurs when Utility Manager launches winhlp32.exe with Local System privileges. A locally authenticated user can exploit a Shatter-style sequence by sending crafted Windows messages to Utility Manager to trigger winhlp32 ...
CVE-2004-0210
CVE-2004-0210 describes a local privilege escalation in the Windows POSIX subsystem affecting Windows NT 4.0 and Windows 2000. The vulnerability is a buffer overflow caused by unchecked message length handling in the POSIX subsystem, enabling a local authenticated user to gain full system privile...
PT-2004-1378 · Microsoft · Winhlp32.Exe +2
Name of the Vulnerable Software and Affected Versions: Windows 2000 Description: The issue allows local users to gain system privileges via a "Shatter" style attack. This is achieved by sending a Windows message to Utility Manager, which launches winhlp32.exe with raised privileges. The attack...
Microsoft Windows Server 2000 - Utility Manager Privilege Escalation (MS04-019)
Microsoft Windows Server 2000 - Utility Manager Privilege Escalation MS04-019 //by Cesar Cerrudo sqlsec at yahoo.com //Local elevation of priviliges exploit for Windows 2K Utility Manager second one!!!! //Gives you a shell with system privileges //If you have problems try changing Sleep values...
MS Windows 2000 Utility Manager Privilege Elevation Exploit (MS04-019)
Exploit for unknown platform in category local exploits ====================================================================== MS Windows 2000 Utility Manager Privilege Elevation Exploit MS04-019 ====================================================================== //by Cesar Cerrudo sqlsec at...
Microsoft Security Bulletin MS04-020 Vulnerability in POSIX Could Allow Code Execution (841872)
Microsoft Security Bulletin MS04-020 Vulnerability in POSIX Could Allow Code Execution 841872 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® 2000 or Windows NT 4.0 Impact of Vulnerability: Local Elevation of Privilege Maximum Severi...
Microsoft Security Bulletin MS04-019 Vulnerability in Utility Manager Could Allow Code Execution (842526)
Microsoft Security Bulletin MS04-019 Vulnerability in Utility Manager Could Allow Code Execution 842526 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® 2000 Impact of Vulnerability: Local Elevation of Privilege Maximum Severity Ratin...
Microsoft Window Utility Manager Local Elevation of Privileges
Microsoft Window Utility Manager Local Elevation of Privileges July 13, 2004 Credit: This vulnerability was researched and discovered by Cesar Cerrudo. Risk Level: High Summary: A local elevation of privileges exists in the Windows Utility Manager which allows any user to take complete control ov...
Unchecked buffer in mstask.dll
======================================================================== = Unchecked buffer in mstask.dll = = MS Bulletin posted: = http://www.microsoft.com/technet/security/bulletin/MS04-022.mspx = = Affected Software: = Microsoft Windows 2000 Service Pack 4 = Microsoft Windows XP, Microsoft...
MS04-022: Task Scheduler Vulnerability (841873)
The remote host is running a version of Windows which contains a flaw in the task scheduler that could lead to arbitrary execution of commands on the remote host. To exploit this vulnerability, an attacker would need to lure a user on the remote host to take certain steps to execute a .job file, ...
MS04-016: Vulnerability in DirectPlay Could Allow Denial of Service (839643)
The remote host contains a version of DirectPlay that is vulnerable to a denial of service attack. DirectPlay is a component of DirectX and is frequently used by game developpers to create networked multi-player games. An attacker could exploit this flaw by sending a malformed IDirectPlay packet ...
CVE-2004-0540
CVE-2004-0540 affects Microsoft Windows 2000 domain authentication: if the domain FQDN is exactly eight characters, the system does not prevent logons by users with expired passwords, constituting an authentication bypass in the domain logon flow. The connected advisory (CPAI-2015-0384) corrobora...
CVE-2004-0540
Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name FQDN is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain...
CVE-2003-0908
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialo...
CVE-2004-0119
The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...
CVE-2004-0123
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code...
CVE-2004-0118
The component for the Virtual DOS Machine VDM subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code...