stream3 flood attack

Topic: Windows NT/2000 DoS via stream3 flood attack Authors: Dark Zorro , Error Date: 2 December 2000 yes... it's old Vendor Informed: 2 December 2000 Software affected: Windows NT 4.0, Windows 2000 Risk: Low Remote: Yes Exploitable: Yes SECURITY.NNOV advisories:...

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...

shtml.exe reveal local path of IIS web directory

I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...

CMD.EXE overflow (CISADV000420)

Cerberus Information Security Advisory CISADV000420 http://www.cerberus-infosec.co.uk/advisories.html Released : 20th April 2000 Name : CMD.EXE overflow Affected Systems : Windows NT/2000 Issue : See details Author : David Litchfield [email protected] Description The Cerberus Security Team...

Microsoft Windows Server 2000/95/98/NT 4.0 - Long Filename Extension

// source: https://www.securityfocus.com/bid/1259/info Windows 95, 98, NT and 2000 suffer from a number of related buffer overflows that can result in a crash if a filename with an extension longer than 128 characters is accessed. Although arbitrary code could be executed via this manner, it woul...

Microsoft Security Bulletin (MS00-026)

Microsoft Security Bulletin MS00-026 ====================================== Patch Available for "Mixed Object Access" Vulnerability Originally Posted: April 20, 2000 Summary - ------- Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000 that could,...

Microsoft Security Bulletin (MS00-027)

Microsoft Security Bulletin MS00-027 - -------------------------------------- Patch Available for "Malformed Environment Variable" Vulnerability Originally Posted: April 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0...

CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

PT-2000-1997 · Microsoft · Windows 98 +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...

CVE-2000-0222

CVE-2000-0222 concerns Windows 2000: the installer does not activate the Administrator password until reboot, enabling remote access to the ADMIN$ share without a password until that reboot occurs. OpenVAS-derived content references this CVE in a script-cve list and highlights a broader SMB conte...

CVE-2000-0222

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...

Проблемы с правами на папки в Win2K при OEM-инсталяции

Если в unattend-инсталяции Windows 2000 используется опция OEMPreinstall, то не накладываются ограничения на доступ к директориям с профилями All Users и Default User...

All Users startup folder left open if unattended install and OEMP reinstall=1

About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...

CVE-2000-0298

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...

Remote DoS Attack in Windows 2000/NT 4.0 TCP/IP Print Request Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Windows 2000/NT 4.0 TCP/IP Print Request Server Vulnerability USSR Advisory Code: USSR-2000037 Release Date: March 28, 2000 Systems Affected: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows N...

Security Bulletin (MS00-021)

Microsoft Security Bulletin MS00-021 - -------------------------------------- Patch Available for "Malformed TCP/IP Print Request" Vulnerability Originally Posted: March 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the TCP/IP Printing Service...

Microsoft Windows NT 4.0/2000 - TCP/IP Printing Service Denial of Service

source: https://www.securityfocus.com/bid/1082/info The TCP/IP Printing Service also known as Print Services for Unix in Windows 2000 is the mechanism used for print service integration with Unix environments. It relies on port 515 for data transmittal. A malformed print request sent to this...

Microsoft Windows NT 4.02000 - TCPIP Printing Service Denial of Service

Microsoft Windows NT 4.02000 - TCPIP Printing Service Denial of Service source: https://www.securityfocus.com/bid/1082/info The TCP/IP Printing Service also known as Print Services for Unix in Windows 2000 is the mechanism used for print service integration with Unix environments. It relies on po...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

win2k.install.txt

Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient \\WINDOZE\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file...