Windows 2000 multiple bugs

Windows 2000 Internet Key Exchange Selects Incorrect Certificate, Update to Help Prevent Cross-Forest Certificate Enrollment, Update to Verify cbDestLength in the Imaadpcm Component, Zones Removed from the Registry When You Start the DNS Service, Account Replication Latency Causes Certificate...

What Win2k SP4 doesn't fix (security), but says it does...

In my testing these security bulleints aren't fixed in Win2k SP4, but are documented that they are at this link: http://www.microsoft.com/technet/treeview/default.asp? url=/technet/security/news/w2kSP4.asp 1. MS02-053. It fixes the FPSE 2000 vulnerability, but not FPSE 2002. 2. MS03-019. It updat...

List of Security Fixes in Windows 2000 Service Pack 4

List of Security Fixes in Windows 2000 Service Pack 4 The information in this article applies to: Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Server SP4 SUMMARY This article describes the following security-related bugs and update...

Named Pipe Filename Local Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Named Pipe Filename Local Privilege Escalation Release Date: 07/08/2003 Application: Microsoft SQL Server Platform: Windows NT/2000/XP Severity: Local privilege escalation Author: Andreas...

Microsoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow

source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a module. Exploitation of this issue...

CVE-2003-0503

The CVE-2003-0503 entry applies to Windows 2000 before SP4, where a buffer overflow in ShellExecute (SHELL32.DLL) can be triggered by a long third argument. This could lead to denial of service or arbitrary code execution. The available documents specify the affected component and the root cause ...

CVE-2003-0507

Stack-based buffer overflow in Active Directory in Windows 2000 before SP4 allows remote attackers to cause a denial of service reboot and possibly execute arbitrary code via an LDAP version 3 search request with a large number of 1 "AND," 2 "OR," and possibly other statements, which causes...

CVE-2003-0507

Summary: CVE-2003-0507 is a stack-based buffer overflow in Microsoft Windows 2000 Active Directory (LSASS.exe) triggered by an LDAP v3 search request with a large number of qualifiers (e.g., multiple AND/OR statements), leading to a denial of service (reboot) and potential arbitrary code executio...

CVE-2003-0503

Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument...

core.active.txt

Core Security Technologies Advisory http://www.coresecurity.com Active Directory Stack Overflow Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: None currently assigned. Title: Active Directory Stack Overflow Class: Boundary Error...

Windows 2000 ShellExecute() buffer overflow

Buffer overflow in 3rd argument...

CORE-2003-0305-03: Active Directory Stack Overflow

Core Security Technologies Advisory http://www.coresecurity.com Active Directory Stack Overflow Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: None currently assigned. Title: Active Directory Stack Overflow Class: Boundary Error...

Windows 2000 Active Directory buffer overflow

Stack overflow on LDAP search request with more than 1000 "AND" statements...

CORE-2003-0305-04: NetMeeting Directory Traversal Vulnerability

Core Security Technologies Advisory http://www.coresecurity.com NetMeeting Directory Traversal Vulnerability Date Published: 2003-07-02 Last Update: 2003-07-02 Advisory ID: CORE-2003-0305-04 Bugtraq ID: 7931 CVE Name: None currently assigned. Title: NetMeeting Directory Traversal Vulnerability...

[SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow

---------------------------------------------------------------------- SNS Advisory No.65 Windows 2000 ShellExecute API Let Applications to Cause Buffer Overflow Problem first discovered: Thu, 5 Dec 2002 Published: Thu, 03 Jul 2003 Reference:...

Active Directory Stack Overflow

Advisory ID Internal CORE-2003-0305-03 Date Published: 2003-07-02 Last Update: 2004-04-21 Advisory ID: CORE-2003-0305-03 Bugtraq ID: 7930 CVE Name: CAN-2003-0663 Title: Active Directory Stack Overflow Class: Boundary Error Condition, Denial of Service Remotely Exploitable: Yes Locally Exploitable...

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow

source: https://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated attacker could exploit this vulnerability by transmitting a malformed...

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow

Microsoft Windows Server 2000 - Active Directory Remote Stack Overflow source: https://www.securityfocus.com/bid/7930/info A vulnerability has been discovered in Microsoft Windows 2000. The problem occurs in the Active Directory component and will result in a denial of service. An unauthenticated...

CVE-2003-0412

Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities...

Windows Media Services Remote Command Execution #2

======================================================================== = Windows Media Services Remote Command Execution 2 = = [email protected] = http://www.security-assessment.com = = MS Bulletin posted: June 25, 2003 =...