KPMG-2002006: Lotus Domino Physical Path Revealed

-------------------------------------------------------------------- -=Lotus Domino Physical Path Revealed=- courtesy of KPMG Denmark BUG-ID: 2002006 Released: 02nd Apr 2002 -------------------------------------------------------------------- Problem: ======== Due to problems handling Windows DOS...

Windows 2000 DCOM clients may leak sensitive information onto the network

BindView Security Advisory -------- Windows 2000 DCOM clients may leak sensitive information onto the network Issue Date: April 2, 2002 Contact: [email protected] Topic: Windows 2000 DCOM system may leak sensitive data onto the network Overview: Due to a flaw in Windows 2000's DCOM layer,...

Local Security Vulnerability in Windows NT and Windows 2000

LOCAL SECURITY VULNERABILITY IN WINDOWS NT AND WINDOWS 2000 Radim "EliCZ" Picha [email protected] discovered a vulnerability in Windows NT 4.0 and Windows 2000. He has written an exploit called DebPloit that shows the weakness of a local Windows NT/2000 security and totally compromises entire...

Webtraversal in PCI Netsupport Manager (all version up to 7 using web extensions)

It is possible to view and download files on machines running PCI Netsupport Manager all version up to 7 that have the web extensions switched on default port 80. This has only been tested on Windows NT 4 server and workstation and Windows 2000 Pro , Server and Advanced server. Example on a...

KPMG-2002005: BitVise WinSSH Denial of Service

-------------------------------------------------------------------- -=BitVise WinSSH Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002005 Released: 18th Mar 2002 -------------------------------------------------------------------- Problem: ======== Using "ill-intended connection attempts...

DoS in SurfControl's EmailFilter

Just an FYI: I did communicate heavily with SurfControl on this before posting it here: On February 12, 2002, I contacted SurfControl concerning a denial of service condition in the EmailFilter Version 4.0. The DoS was successfully carried out on a Windows 2000 Professional SP2 box. On February 1...

CVE-2000-0581

The affected component is Windows 2000 Telnet Server. The vulnerability arises when the Telnet Server processes a continuous stream of binary zeros from a remote attacker, which leads to a denial-of-service and causes the server to crash. There are no additional details on affected subcomponents,...

CVE-2001-0659

CVE-2001-0659 describes a buffer overflow in the Windows 2000 IrDA driver (infrared data exchange). A malformed IrDA packet can be used by a physically proximate attacker to trigger a denial of service reboot. Technical details in connected sources identify the affected component as the IrDA driv...

CVE-2001-0860

Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address IP address that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation NAT...

CVE-2001-0504

Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...

CVE-1999-1358

Technical details about CVE-1999-1358 are not publicly provided in the supplied documents. Monitor for updates.

EUVD-2000-1096

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2001-0860

The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

CVE-2001-0540

CVE-2001-0540: Memory leak in Windows NT/2000 Terminal Server processing of malformed RDP requests to port 3389 leads to memory exhaustion and DoS. Affected: Windows NT/2000 Terminal Services. Root cause: memory handling during RDP request processing. Remediation: Microsoft Security Bulletin MS01...

CVE-2001-0504

The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...

CVE-2001-0502

The CVE-2001-0502 issue affects Windows 2000 LDAP over SSL where a function fails to properly verify permissions when the directory principal is a domain user and the data attribute is the domain password, allowing local users to modify other users’ login passwords. Affected component: LDAP over ...

CVE-2000-1111

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2001-0502

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users...

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...