old DOS still good 4 win2k

Well, nothing new on the flatline, but I think that can be useful to send this one. We tested out the win 2k beta version, and we've found that some old attacks are still valid to cause a DOS. Specifically the simple ping flood from a PII 300 to another PII 300 with 64Mb RAM, can freez the box...

fbi-aim-dos.txt

FROM THE OFFICES OF: | | | \ | | | | | | | | | |/ / | | | | | | | | / \ / | / | '| | || ' | / \ | | |/ |/ \ ' \ / / \ | || | | |/ / | | | | || | | | || / | | | | | / | | | | / | / // ,|| /| ||\||||, ||| ||\| / | |/ AOL Instant Messenger DoS Denial of Service exploit. Website:...

Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98

Здравствуйте , Лазейка в службе Terminal Services, открывающая доступ к ресурсам подключенных к ней клиентов Windows 95/98 Network World http://www.nwfusion.com Если Вы работаете на сервере Windows 2000 с установленным терминальным сервисом Terminal Services, то должны знать о его потенциальной...

Security Bulletin (MS00-020)

Microsoft Security Bulletin MS00-020 - -------------------------------------- Patch Available for "Desktop Separation" Vulnerability Originally Posted: June 15, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000. The...

Проблема с Desktop'ами в Windows 2000

При определенных условиях локальный пользователь может обратиться к виртуальным desktop'ам открытых с других машин, и просмотреть/изменить какую-либо информацию...

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

Incorrect Permissions for CD-Rom Administrative Shares

Hi All. I've received tons of responses on this topic and found out why there are so many conflicting results of this problem. Our policy is to rename CD-Rom drives from the default assigned by Windows 2000 to H:, because there's less confusion when adding extra drives. The problem is this. If yo...

Некорректные разрешения на служебный ресурс для CDROM в Win2K

Если задать новое имя для CDROM например X:, то разрешения для административного ресурса X$ изменятся на Everyone:Full Contorl, что позволяет любому желающему обратиться к CD даже если он не разделен...

Security Bulletin (MS00-032)

Microsoft Security Bulletin MS00-032 - -------------------------------------- Patch and Tool Available for "Protected Store Key Length" Vulnerability Originally Posted: June 01, 2000 Summary ======= Microsoft has released a patch and a tool that eliminate a security vulnerability in Microsoftr...

Проблема с Protected Storage в Win2K

Для шифрования всегда используется длина ключа 40 бит...

CVE-2000-0487

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...

DoS против explorer под Win2K

Использование протокола shell:// приводит к красочным эффектам...

Win 2000 & IE 'shell://' problem?

I found that IE 5 running Win 2000 accepts "shell://" as a legal protocol, and when any URL ie "shell://localhost" or just "shell://" is loaded IE crashes and brings explorer.exe down with it. I think this would cause a user who didnt know much to think that Win 2000 had crashed of course killing...

Security Bulletin (MS00-036)

Microsoft Security Bulletin MS00-036 - -------------------------------------- Patch Available for "ResetBrowser Frame" and "HostAnnouncement Flooding" Vulnerabilities Originally posted: May 25, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities, one...

jolt2 - Remote DoS against NT, W2K, 9x

BindView Security Advisory -------- Jolt2 - Remote Denial of Service attack against Windows 2000, NT4, and Win9x Issue Date: May 19, 2000 Contact: [email protected] Topic: Fragmented IP packets cause denial of service Overview: Sending large numbers of identical fragmented IP packets to a...

windows2k.iss

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

Слабость EFS в Windows 2000

При использовании Encrypted File System в Windows 2000 возможно дешифрование файлов, т.к. локальная база данных безопасности хранится на диске. Для предотвращения этого необходимо использовать syskey с паролем или хранением ключа на дискете...

ISS SAVANT Advisory 00/26

Internet Security Systems SAVANT Windows 2000 Advisory No: 00/26 Dated: 10 May 2000 Platforms Affected: Windows 2000 Server Windows 2000 Professional Subject: Default configuration of SYSKEY permits compromise of Encrypting File System Summary: The Encrypting File System EFS permits files and...