Microsoft Security Bulletin MS03-022: Flaw in ISAPI Extension for Windows Media Services Could Cause Code Execution (Q822343)

-----BEGIN PGP SIGNED MESSAGE----- - - ------------------------------------------------------------------ Title: Flaw in ISAPI Extension for Windows Media Services Could Cause Code Execution 822343 Date: 25 June 2003 Software: Microsoftr Windowsr 2000 Impact: Allow an attacker to execute code of...

Alt-N WebAdmin 2.0.x - USER Remote Buffer Overflow (1)

Alt-N WebAdmin 2.0.x - USER Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8024/info Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM...

CVE-2003-0414

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile...

CVE-2003-0412

Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of long HTTP requests, which could allow remote attackers to hide malicious activities. The available documents do not provide a remediation or explicit exploit details.

Windows Media Services Remote Command Execution

======================================================================== = Windows Media Services Remote Command Execution = = NSIISLOG.DLL Ver 4.1.0.3920 = = MS Bulletin posted: May 28, 2003 revised May 30, 2003 = http ://www.microsoft.com/technet/security/bulletin/MS03-019.asp = = Affected...

Microsoft Security Bulletin MS03-019: Flaw in ISAPI Extension for Windows Media Services Could Cause Code Execution (817772)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in ISAPI Extension for Windows Media Services Could Cause Code Execution 817772 Date: 28 May 2003 Software: Microsoftr Windows NTr 4.0, and Windowsr 2000 Impact: Allow an attacker ...

Buffer overflow in Shell32.dll . Net monitor

Issue Buffer overflow in Shell32.dll . Net monitor Tested version W2000 Server Sp3 Shell32.dll versin 5.0.3502.5436 Vendor status Microsoft was informed months ago but as they seem to be even slower than me debugging I dediced to publish it . Descripcin Net monitor is a traffic analisis tool that...

Microsoft Windows 2000 Network Monitor buffer overflow

Buffer overflow on pasring SMB request to oversized filename...

Microsoft Security Bulletin MS03-019: Flaw in ISAPI Extension for Windows Media Services Could Cause Denial of Service (817772)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in ISAPI Extension for Windows Media Services Could Cause Denial of Service 817772 Date: 28 May 2003 Software: Microsoftr Windows NTr 4.0, and Windowsr 2000 Impact: Allow an attack...

Re: Eudora 5.2.1 attachment spoof

Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I have now found better games to play: From: me To: you Ensure victim has both attachments 'calc' and 'calc.exe' sent in this, or previous, email. Then the following shows 'windows' icon and runs calc.exe without...

sunone.txt

Multiple Vulnerabilities in Sun-One Application Server ------------------------------------------------------- Release Date: May 27, 2003 System Affected Sun-ONE Application Server 7.0 for Windows 2000/XP Description During a brief audit of a SunONE Application Server installation on Windows 2000...

Multiple Vulnerabilities in Sun-One Application Server

Multiple Vulnerabilities in Sun-One Application Server ------------------------------------------------------- Release Date: May 27, 2003 System Affected Sun-ONE Application Server 7.0 for Windows 2000/XP Description During a brief audit of a SunONE Application Server installation on Windows 2000...

Eudora 5.2.1 buffer overflow DoS

Building on my Eudora attachment spoof http://www.securityfocus.com/archive/1/322286 I notice that sending a filename with many dots crashes Eudora, e.g. From: me To: you Attachment ConvertedCR: "B.A.A.A ... .A.A.A" with 122 repetitions of ".A" make it crash, writing an Exception.log file. Fewer...

Microsoft NetMeeting 2.1/3.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one of the URI parameters of the CALL...

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow PoC source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be du...

EType EServ 2.982.993.0 - Resource Exhaustion (Denial of Service) (1)

EType EServ 2.982.993.0 - Resource Exhaustion Denial of Service 1 source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open...

EType EServ 2.982.993.0 - Resource Exhaustion (Denial of Service) (2)

EType EServ 2.982.993.0 - Resource Exhaustion Denial of Service 2 // source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open...

EType EServ 2.98/2.99/3.0 - Resource Exhaustion (Denial of Service) (1)

source: https://www.securityfocus.com/bid/7552/info A denial of service vulnerability has been reported for EServ. The vulnerability exists due to the way the server handles connections. Specifically, memory allocated for open connections are not properly freed when a connection no longer exists...

Microsoft Windows 2000/XP - SMB Authentication Remote Overflow

Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2 SP3 Windows XP SP0 SP1 EXPLOIT PROVIDED FOR EDUCATIONAL...

Microsoft Windows 2000XP - SMB Authentication Remote Overflow

Microsoft Windows 2000XP - SMB Authentication Remote Overflow Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2...