CVE-2000-0663

The CVE-2000-0663 issue concerns Windows NT/2000 where the registry entry for Explorer.exe uses a relative path name, enabling a local user to cause arbitrary commands to run by placing a Trojan named Explorer.exe in the %Systemdrive% directory (the “Relative Shell Path” vulnerability). Affected ...

@stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 )

The signature was botched on the first one. Please use this is possible. -weld -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: All-Mail buffer overrun vulnerability Release Date: 10/12/2000 Application: Nevis Systems All-Mail 1.1 Platform...

Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection

By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...

Linux news 6.10.00

Ваш билет до Windows 2000 Примечательное начало: как бы вы ни относились к Microsoft, трудно отрицать, что Windows 2000 Professional - это на сегодня самая стабильная и мощная версия Windows. Если вы были бы рады избавиться от изъянов и ограничений Windows 95 или 98, но не собираетесь в ближайшее...

Многочисленные дырки в LPC Windows 2000/NT

Возможны несколько DoS атак, кроме того, можно подменить LPC-запрос получив доступ к контексту локальной машины...

Various security vulnerabilities with LPC ports

BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin [email protected] Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP...

@stake Advisory: Unauthorized "Directory Listings" under IIS 5.0 (A100400-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Unauthorized "Directory Listings" under IIS 5.0 Release Date: 10/04/2000 Application: Internet Information Server 5.0 Platform: Windows 2000 Severity: An attacker can enumerate files in...

bindview.lpc.txt

BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP6a Window 2000 up to and...

MS00-070: LPC and LPC Ports Vulnerabilities patch (266433)

The hotfix for the 'Multiple LPC and LPC Ports Vulnerabilities' has not been applied on the remote Windows host. These vulnerabilities allow an attacker gain privileges on the remote host, or to crash it remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10525;...

Microsoft Windows NT 4.0/2000 Predictable LPC Message Identifier - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The structure of a messag...

Extent RBS directory Transversal.

Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...

@stake Advisory: NTLM Replaying via Windows 2000 Telnet Client (A 091400-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I wish this could have gone out sooner but there was an issue with the initial Microsoft patch which we found during our testing. They subsequently decided to fix the patch which delayed things a bit. We feel that if a vendor is taking an issue...

Security Bulletin (MS00-067)

Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...

Win2k Telnet.exe malicious server vulnerability

Microsoft was informed of this problem with exploit over a month ago. I received some token responses right after emailing them, but have heard nothing since. If they have released an advisory of their own yet, I have not seen it. I informed them up-front that I would release a full-disclosure...

Win2k Telnet.exe malicious server vulnerability

/ NTLM telnetD v0.8 Snarfs NTLM challenge/response by convincing w2k telnet client to auto-authenticate. Outputs auth-data in LophtCrack sniff format on stdout. compile: gcc -o w2kteld ntlmtelnetd.c run: ./w2kteld Then wait for w2k to telnet to you. for the impatient, there are always ways of...

DoS Windows 2000 через RPC

Некорректный RPC-пакет приводит к отказу сервера...

Security Bulletin (MS00-066)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-066 ====================================== Patch...

Security Bulletin (MS00-065)

Microsoft Security Bulletin MS00-065 - ---------------------------------------- Patch Available for "Still Image Service Privilege Escalation" Vulnerability Originally posted: September 6, 2000 ==================================== Summary ======= Microsoft has released a patch that eliminates a...

@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)

@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...

msw2ktelnetdos.sh

Microsoft Windows 2000 Telnet Server DoS Vulnerability Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If automatic restart is enabled, numerous attacks will cause the...