Локальная дырка в Windows 2000 - переполнение буфера в Still Image Service

Переполнение буфре в сервисе позволяет выполнение кода с привилегией Local System...

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by...

Microsoft Windows Server 2000 - Still Image Service Privilege Escalation

source: https://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by default. This is due to an unchecked buffer in one of the methods by whic...

"Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000

4 сентября 2000 г. Пресс Релиз "Лаборатория Касперского" сообщает об обнаружении нового поколения вирусов для Windows 2000 "Лаборатория Касперского", российский лидер в области разработки антивирусных систем безопасности, сообщает об обнаружении вируса W2K.Stream - нового поколения вредоносных...

Новое поколение вирусов под Windows 2000

Новый вирус Stream использует альтернативные потоки данных NTFS, позволяющие придавать файлам новые атрибуты, для хранения тела зараженного файла, что усложняет процесс лечения вируса...

lock workstation vulnerability in win2000 pro running Netwareclient

I have discovered what appears to be a security flaw in Windows 2000 Pro SP1 machines running Novell's Client 4.71.20000313. I have no way to verify whether or not this extends to other versions. An Example to illustrate: The win 2000 pro workstation is a member of the domain. The user is logged...

MS00-062: Local Security Policy Corruption (269609)

The hotfix for the 'Local Security Policy Corruption' problem has not been applied. This vulnerability allows a malicious user to corrupt parts of a Windows 2000 system's local security policy, which could prevent this host from communicating with other hosts in this domain. C Tenable Network...

DoS против Windows 2000 (повреждение файла локальной политики)

Повредив файлы локальной политики авторизованный опльзователь может вывести систему из строя...

Microsoft Security Bulletin (MS00-062)

Microsoft Security Bulletin MS00-062 - -------------------------------------- Patch Available for "Local Security Policy Corruption" Vulnerability Originally posted: August 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000...

Microsoft IIS Translate f: ASP/ASA Source Disclosure

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. SP source code can contain sensitive information such as usernames and passwords for ODBC connections. %NASLMINLEVEL 70300 This script was written by...

IIS 5.0 cross site scripting vulnerability - using .shtml files or /_vti_bin/shtml.dll

Georgi Guninski security advisory 19, 2000 IIS 5.0 cross site scripting vulnerability - using .shtml files or /vtibin/shtml.dll This advisory describes two vulnerabilites one is already fixed by Microsoft but I decided to put them together. Systems affected: IIS 5.0/Windows 2000. Exploited with...

Translate:f summary, history and thoughts

Because Microsoft went the way of HIDING the actual mechanism of Translate:f from all of us original KB article is gone and new Security Bulletin is playing nasty game of downplaying the problem, i have decided to write follow up with sufficient information. HOW IT WORKS -------------------------...

Дырка в Windows 2000 COM Internet Services Proxy

Определенные виды RPC-запросов упакованных в HTTP приводят к краху сервиса...

srcgrab.pl.txt

Subject: Re: Translate:f summary, history and thoughts Simple perl script exploit for the problem. Please find a simple perl script included at the bottom that exploits below described problem. ----- Original Message ----- From: "Daniel Doèekal" To: Sent: Tuesday, August 15, 2000 7:39 PM Subject:...

Microsoft refuses to fix a security bug in Windows 2000

Microsoft refuses to fix a security bug in Windows 2000 Eugene Kalinin Medical Informatics Laboratory Moscow, Russia Aug 16, 2000 Yesterday Microsoft refused to fix a security problem in Windows 2000 RPC service. The bug in RPC service allows an attacker to put a Windows 2000 server out of servic...

ie5-msn.exec.txt

This is a multi-part message in MIME format. --------------CEF2E6A38C7BDB5B012ADFB8 Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Georgi Guninski security advisory 18, 2000 IE 5.5/5.x for Win98 may execute arbitrary files that can be accessed thru Microsoft Networking...

Security Bulletin (MS00-058)

Microsoft Security Bulletin MS00-058 - -------------------------------------- Patch Available for "Specialized Header" Vulnerability Originally posted: August 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Internet Information Server that ships...

local Administrator compromise at least on default Windows 2000

Georgi Guninski security advisory 18, 2000 IE 5.5/5.x for Win98 may execute arbitrary files that can be accessed thru Microsoft Networking. Also local Administrator compromise at least on default Windows 2000. Systems affected: For remote file execution: IE 5.5,5.x/Windows 98, the files must be...

Security Bulletin (MS00-053)

Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...

Уязвимость в services.exe Windows 2000

Локальный пользователь может создать приложение, которое "перехватит" именованный канал регистрируемый сервисом, таком образом получив возможность оперировать в контексте операционной системы...