CVE-2000-0942

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting CSS attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability...

CVE-2000-0933

The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...

DoS by SMTP AUTH command in IPSwitch IMail server

Dear folks, I found a kind of DoS to handle SMTP AUTH command in IPSwitch IMail server version 6.0.5. IPSwitch ships a product titled IMail, an email server for usage on NT servers serving SMTP, POP3, IMAP4, LDAP etc. It supports SMTP AUTH commands RFC2554 and several authenticate methods to...

Security Advisory(CSA-200011)

CHINANSL Security AdvisoryCSA-200011 Topic: PHP AND APACHE Vulnerability Release Dateёє Dec 6, 2000 Affected system: ============ APACHE WEB SERVER 1.3 ЎЎЎЎ- Microsoft Windows NT 4.0 ЎЎЎЎ- Microsoft Windows 2000 Impact: ====== CHINANSL security team has found a security problem in Apache web serv...

Security Bulletin MS00-096

====================================================================== Issue: Wrong permissions on SNMP registry key Date: 06 December 2000 Affected Software: Windows 2000 Impact: Usurp management privileges on SNMP devices Bulletin ID: MS00-096 Bulletin:...

[CORE SDI ADVISORY] MS Windows NT4 and Windows 2000 Phonebook Service overflow

CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft PhoneBook Server overflow Date Published: December 4th, 2000 Advisory ID: CORE-20001204 Bugtraq ID: 2048 CVE CAN: None currently assigned. Title: Microsoft PhoneBook Server buffer overflow Class: Boundary condition error Remotely...

@stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1)

@stake, Inc. www.atstake.com Security Advisory Advisory Name: IIS 4.0/5.0 Phone Book server buffer overrun Release Date: 12/04/2000 Application: Microsoft's Phone Book Server on IIS 4.0, 5.0 Platform: Windows NT 4.0, Windows 2000 Severity: A buffer overflow conditions exists in pbserver.dll that...

Security Bulletin (MS00-094)

-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...

UDP-шторм в Windows 2000 (Kerberos 5 UDP storm)

Windows 2000 отвечает на любые пакеты в UDP-порт 464 Kerberos v5, что позволяет устроить UDP-шторм в сети...

UDP Ping-pong in Win2k

Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...

DoS против сервиса telnet в Windows 2000

Windows 2000 Professional разрешает лишь одно telnet-соединение. При этом, несмотря на timeout в процедуре авторизации, висящий неавторизованый пользователь не будет принудительно отключен...

Windows 2000 Telnet Service DoS

Below is the original message sent to Microsoft, and since apparently 'Disclosure Procedures' are once again in focus... 11/08/2000 - Issue is reported to Microsoft's Security Response Team [email protected] 11/10/2000 - Microsoft confirmed receipt 11/21/2000 - Microsoft responded that they...

@stake Advisory: Windows 2000 .ASX Buffer Overrun (A112300-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: Windows 2000 .ASX Buffer Overrun Release Date: 11/23/2000 Application: Microsoft Windows Explorer with Microsoft Media Player v6.xx and Microsoft Media Player v7.xx. Platform: Windows 2000 S...

Security Bulletin (MS00-089)`

Microsoft Security Bulletin MS00-089 - -------------------------------------- Patch Available for "Domain Account Lockout" Vulnerability Originally posted: November 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 2000. The...

Проблемы в Windows 2000 (Domain Account Lockout)

Политика блокировки учетных записей пользователя после неудачных попыток входа не срабатывает на машинах, которые не являются членами домена Windows 2000...

CVE-2000-1217

Microsoft Windows 2000 before Service Pack 2 SP2, when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the "Domain...

CVE-2000-0851

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WMUSER message, aka the "Still Image Service Privilege Escalation" vulnerability...

CVE-2000-0834

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability...

guninski27.txt

Georgi Guninski security advisory 27, 2000 IE 5.x Win2000 Indexing service vulnerability Systems affected: IE 5.x/Outlook/Outlook Express - Windows 2000 with Indexing service started Risk: Medium Date: 10 November 2000 Legal Notice: This Advisory is Copyright c 2000 Georgi Guninski. You may...

Еще одна дырка в Inexing Service из Windows 2000 (ixsso.query ActiveX)

При включенной службе Indexing Service ActiveX-компанент разрешенный для использования через Web позволяет провести поиск по локальным файлам...