Microsoft Windows Server 2000 - Named Pipes Predictability

source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...

Security Bulletin (MS00-052)

Microsoft Security Bulletin MS00-052 - -------------------------------------- Patch Available for "Relative Shell Path" Vulnerability Originally posted: July 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0 and Windowsr...

DoS против telnet в Windows 2000

Большое число случайных данных в порт telnet TCP/23 приводит к отказу службы...

Security Bulletin (MS00-050)

Microsoft Security Bulletin MS00-050 - -------------------------------------- Patch Available for "Telnet Server Flooding" Vulnerability Originally Posted: July 24, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Telnet Server that ships as part...

CVE-2000-0580

Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...

CVE-2000-0580

CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...

DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.

Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...

CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...

CVE-2000-0487

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...

CVE-2000-0331

Buffer overflow in Microsoft command processor CMD.EXE for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability...

CVE-2000-0487

CVE-2000-0487 : The Protected Store in Windows 2000 does not properly select the strongest available encryption, defaulting to 40-bit instead of 56-bit DES. The description confirms a weak encryption fallback, with referenced advisory MS00-032. No exploitation details are provided in the initial ...

CVE-2000-0544

CVE-2000-0544 affects Windows NT and Windows 2000 hosts due to malformed DCE/RPC SMBwriteX requests carrying an invalid data length, enabling a remote attacker to cause a denial of service. The connected Nessus plugin MS00-066 indicates a patch (hotfix Q272303) addressing this issue; the descript...

CVE-2000-0544

Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length...

CVE-2000-0311

Technical details for CVE-2000-0311 are not publicly available in the provided documents. Monitor for updates.

SX-20000620-2

FSC Internet Corp. / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-2 - Multiple ports/protocols partial Denial of Service in Microsoft Windows 2000 Server Summary Multiple ports and protocols on Microsoft Windows 2000 Server are susceptible to a simple network attack which raises CPU...

SX-20000620-1

FSC Internet / SecureXpert Labs SecureXpert Labs Advisory SX-20000620-1 - Denial of Service vulnerability in Microsoft Windows 2000 Telnet Server Summary Microsoft Windows 2000 Server is supplied with a Telnet server for remote console access. A Denial of Service vulnerability exists in this serv...

CVE-2000-0580

Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...

CVE-2000-0581

Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash...

Microsoft Windows Server 2000 - Remote CPU-overload

source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68, 135, 137, 500, 1812, 1813, 2535,...