CVE-2000-0933

The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...

CVE-2000-1034

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...

CVE-2000-0933

Technical details (affected products, exact root cause, vulnerable components, versions, or fixes) are not provided in the connected documents; monitor for updates.

CVE-2000-0942

CVE-2000-0942 affects the CiWebHitsFile component of Microsoft Indexing Services for Windows 2000. The vulnerability allows remote attackers to perform a cross-site scripting (XSS) attack via a CiRestriction parameter in a .htw request. The NVD/connected records confirm the impact as a partial co...

CVE-2000-0834

CVE-2000-0834 : The Windows 2000 Telnet client defaults to NTLM authentication, enabling remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing at a malicious server. The vulnerability affects the Windows 2000 Telnet client’s NTLM authentication behavior a...

CVE-2000-0851

The CVE-2000-0851 issue is a buffer overflow in the Windows 2000 Still Image Service that enables local users to escalate privileges via a long WM_USER message. Affected component: Still Image Service on Windows 2000. Root cause: buffer overflow in handling WM_USER message. Impact: local privileg...

CVE-2000-0851

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WMUSER message, aka the "Still Image Service Privilege Escalation" vulnerability...

Дырка в telnet-сервисе Windows 2000

При разрешенной записи GUEST можно войти через telnet Используя имя пользователя GUEST...

Security Bulletin (MS01-001)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Web...

Vulnerable: Conference Room Professional-Developer Edititon.

Vulnerable: Conference Room Professional-Developer Edititon. www.webmaster.com Only tested on Windows NT 4.0 sp6a and Windows 2000 pro. Conference Room 1.8.1x or older versions are subject to a DoS attack when following commands are used. Make to connections to the irc server second being the clo...

Advisory: PGP 7.0 signature verification vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Pretty Good Privacy Severity: Medium to high Impact: Users with write access to signed exported key blocks may replace them with arbitrary keys without any warning being issued upon import of those keys Local: Yes Remote: No though...

CVE-2000-1105

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...

CVE-2000-1111

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root

Georgi Guninski security advisory 32, 2001 Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root Systems affected: Lotus Domino 5.0.5 Windows 2000 - have not tested other versions/platforms Risk: High Date: 5 January 2001 Legal Notice: This Advisory is Copyright c 2000...

Frontpage Publishing DoS (Denial of Service)

Sorry for the delay in posting this. Frontpage Publishing DoS Denial of Service Release Date: Dec 22, 2000 Systems Affected: Default Installations of Windows NT4 IIS4 SP6or Default Installations of Windows 2000 IIS5 SP1or Description: Any current NT server running IIS with Frontpage server...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

Дырка в мастере "Configure Your Server" Windows 2000

Создается пустой пароль Restore mode...

Security Bulletin MS00-099

====================================================================== Issue: "Configure Your Server" tool creates blank password for Directory Service Restore Mode Date: 20 December 2000 Affected Software: Windows 2000 server and Advanced Server Impact: Install malicious code Bulletin ID: MS00-0...

CVE-2000-1105

The CVE-2000-1105 vulnerability relates to the ixsso.query ActiveX control, which is incorrectly marked safe-for-scripting. CERT details show that Index Server 2.0 and Indexing Service 3.0 expose a web-accessible interface allowing remote attackers to enumerate local files on a Windows 2000 syste...

CVE-2000-1105

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...