CVE-2001-0261

Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files...

CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

CVE-2001-0015

Network Dynamic Data Exchange DDE in Windows 2000 allows local users to gain SYSTEM privileges via a "WMCOPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process...

WFTPD Pro 3.00 R1 Buffer Overflow

When sending a command cwd followed by a long argument 500 char '.' the server crashes with: Anwendungspopup: WFTPD Service Control: WFTPD.EXE - Fehler in Anwendung: Die Anweisung in "0x2e2e2e2e" verweist auf Speicher in "0x2e2e2e2e". Der Vorgang "read" konnte nicht auf dem Speicher durchgefЭhrt...

Security Bulletin MS01-013

---------------------------------------------------------------------- Title: Windows 2000 Event Viewer Contains Unchecked Buffer Date: February 26, 2001 Software: Windows 2000 Impact: Run code of attacker's choice Bulletin: MS01-013 Microsoft encourages customers to review the Security Bulletin...

Дырка в Event Viewer из Windows 2000

Переполнение буфера при отображении детайлей события...

NT drivers are potentially vulnerable to format string bug

Many NT drivers are potentially vulnerable to "format string bug". The problem is concerned with DbgPrint function that is used for debug messages. Some drivers instead of directly call of this function use additional intermediate functions. Those functions add a prefix to an outputted string,...

Microsoft Security Bulletin MS01-011

---------------------------------------------------------------------- Title: Malformed Request to Domain Controller can Cause Denial of Service Date: 20 February 2001 Software: Windows 2000 Server, Advanced Server and Datacenter Server Impact: Denial of Service Bulletin: MS01-011 Microsoft...

DoS против контроллеров домена в Windows 2000

Флуд определенными типами запросов приводит к 100 загрузке процессора...

MS01-011 / MS01-036: LDAP over SSL Arbitrary User Password Modification (287397 / 299687)

The remote version of Windows 2000 contains a bug in its LDAP implementation that fails to validate the permissions of a user requesting to change the password of a third-party user. An attacker may exploit this vulnerability to gain unauthorized access to the remote host. C Tenable Network...

REVISION: @stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please note revision section below @stake Inc. www.atstake.com Security Advisory Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Updated on 2/08/2001 Application: Network DDE system component Platform: Windows 2000 up to and...

Дырка в Windows 2000 (Network DDE Agent privilege elevation)

Network DDE Agent выполняет запросы клинтской программы в контексте локальной системы вместо контекста запрашивающего пользователя...

Windows client UDP exhaustion denial of service

Georgi Guninski security advisory 37, 2001 Windows client UDP exhaustion denial of service Systems affected: Windows 2000 Prof, Windows 98 probably other Windowses Risk: Low Date: 6 February 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. Yo...

@stake Advisory Notification: NetDDE Message Vulnerability (A020501-1)

@stake Inc. www.atstake.com Security Advisory Notification Advisory Name: NetDDE Message Vulnerability Release Date: 02/05/2001 Application: Network DDE system component Platform: Windows 2000 up to and including Service Pack 1 Severity: Any local user can obtain SYSTEM privileges Author: DilDog...

Microsoft Windows 98/2000 - UDP Socket Denial of Service

source: https://www.securityfocus.com/bid/2340/info Microsoft Windows 2000 and 98 are subject to a denial of service condition. Receiving a maliciously crafted email or visiting a malicious web site could prevent Windows 2000 from DNS resolution and Windows 98 from accepting any new TCP...

Security Bulletin MS01-007

---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...

Security Bulletin MS01-006

---------------------------------------------------------------------- Title: Patch Available for "Invalid RDP Data" Vulnerability Date: 31 January 2001 Software: Windows 2000 Terminal Services Impact: Denial of Service Bulletin: MS01-006 KB Article: Q286132 Available Soon Microsoft encourages...

Security hole in Virus Buster 2001

Hi folks, I found a security hole in the feature of virus scan for e-mail in Virus Buster 2001 from Trend Micro Inc. Virus Buster 2001 is a japanese software package that has similar functions of PC-cillin 2000 such as eMail Virus Scanning and Browser Scanning. The feature of virus scan for e-mai...

CVE-2000-0834

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability...

CVE-2000-1034

The CVE relates to a buffer overflow in the Windows 2000 System Monitor ActiveX control (sysmon.ocx). The vulnerability allows remote code execution by crafting a malicious LogFileName value in HTML/scripted content, permitting exploitation by a user who can load the affected page or message. The...