Insecure Default Service DACL's in Windows 2003

To the list, In my documentation of the Default DACL on Windows 2003 Services, I have found and confirmed the following: Both the Distributed Link tracking Server Service and Internet Connection Firewall Service have the Default DACL of Everyone:Full Control, which basically lets anyone connect t...

Windows XP/Windows 2003 DoS

Flood with WinKey+U from consoles or via RDP before logon causes memory exhaustion...

[Full-Disclosure] Remotely Exploitable DoS Flaw in XP and 2003

From anywhere with in either Windows XP and Windows 2003 - at the logon screen if you want - holding down WinKey + U will, with time, slow the machine down to a craw eventually causing the machine to lock. If remote desktop is enabled - at the login screen, the aforementioned key sequence can be...

MS04-016: Vulnerability in DirectPlay Could Allow Denial of Service (839643)

The remote host contains a version of DirectPlay that is vulnerable to a denial of service attack. DirectPlay is a component of DirectX and is frequently used by game developpers to create networked multi-player games. An attacker could exploit this flaw by sending a malformed IDirectPlay packet ...

Vulnerabilities in Member Management System 2.1

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

MS Windows XP/2003 Samba Share Resource Exhaustion Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows XP/2003 Samba Share Resource Exhaustion Exploit ========================================================== !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve...

Microsoft Windows XP2003 - Samba Share Resource Exhaustion (Denial of Service)

Microsoft Windows XP2003 - Samba Share Resource Exhaustion Denial of Service !/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the...

Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service)

!/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the client creates and deletes a lot of files on the server, the server suddenly...

Microsoft PCHealth 2003/XP Buffer Overflow (#NISR15102003)

NGSSoftware Insight Security Research Advisory Name: Microsoft PCHealth Buffer Overflow Vulnerability Systems Affected: Windows 2003 and XP Severity: Critical Risk Vendor URL: http://www.microsoft.com/ Author: David Litchfield [email protected] Date Vendor Notified: 23rd July 2003 Date of...

[Full-Disclosure] Listbox And Combobox Control Buffer Overflow

======================================================================== = Listbox And Combobox Control Buffer Overflow = = MS Bulletin posted: October 15, 2003 = http://www.microsoft.com/technet/security/bulletin/MS03-045.asp = = Affected Software: = Microsoft Windows NT 4.0 = Microsoft Windows...

Bad news on RPC DCOM vulnerability

Dear [email protected], There are few bad news on RPC DCOM vulnerability: 1. Universal exploit for MS03-039 exists in-the-wild, PINK FLOYD is again actual. 2. It was reported by exploit author and confirmed, Windows XP SP1 with all security fixes installed still vulnerable to variant of t...

EEYE: Internet Explorer Object Data Remote Execution Vulnerability

Internet Explorer Object Data Remote Execution Vulnerability Release Date: August 20, 2003 Reported Date: May 15, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 Microsoft Internet Explore...

Windows 2003/XP gethostbyaddr() NULL pointer bug

If invalid CNAME in reverse lookup zone is specified, gethostbyaddr returns hostent structure with name pointer set to NULL...

Windows 2003 sin2k.sys EngTextOut DoS

DoS on function call with non-ASCII text...

Windows 2003 win2k.sys vulnerability

BRIEF SYNOPSIS SUMMARY Under Windows NT5.2, all software that uses "EngTextOut" are exposed to BSOD when attempting to print non-ASCII characters. POINT OF INTEREST "win32k.sys" at 0xbf8bc8d7 Tue Mar 25 00:40:49 2003. IMPLICATIONS Envisage it. SYSTEMS AFFECTED Windows 2003 web...

: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Advisory ID Internal CORE-2006-0714 1. Advisory Information Advisory ID : CORE-2006-0714 Bugtraq ID : 19215 CVE Name : CVE-2006-3942 Title : Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Class : Failure to Handle Exceptional Conditions Remotely Exploitable : Yes Locally Exploitable : Yes...

AntigenUpdateDetectoid-975355

Checks if Antigen is installed and the Rollup is applicable for X86 versions of 1. Windows XP 2. Windows 2000 3. Windows 2003...

Windows Small Business Server 2003 RTM

Windows Small Business Server 2003 RTM...

Security Update for Windows XP x64 Edition and Windows 2003 x64 Edition (KB969878)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...