Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which fails to perform proper bounds checking on the 'From:' head...

CVE-2000-0330

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability...

Microsoft Windows 9598 - UNC Buffer Overflow (2)

Microsoft Windows 9598 - UNC Buffer Overflow 2 // source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename...

Microsoft Windows 95/98 - UNC Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker can cause the machine to crash or...

Microsoft Windows 95/98 - UNC Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker can cause the machine to crash or...

RDS_exploit.txt

Ok, I'm a day or two behind on this...I took a much-needed siesta from all things binary. Anyways, below is the updated RDS exploit script. New features include: - UNC support. This has only been tested with Windows 95 shares...NT may cause authentication wackiness. Use -u \server\share\file.mdb...

Sambar_DoS.txt

While testing the security of the Sambar HTTP-Server I found it vulnerable to a simple DOS attack. Sending a "GET XXXX...a lot of Xs..XXXX HTTP/1.0" crashes the Server. It will die WITHOUT logging the attack. My testing-environment: Sambar 4.2.1 M$IE 5.0 de Windows 95 C de Sample exploit code...

CVE-1999-1454

Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC Escape key...

CVE-1999-0391

CVE-1999-0391 involves the reuse of the SMB authentication cryptographic challenge in Windows 95/Windows 98, enabling an attacker to replay the response and impersonate a user. Affected software is Windows 95 and Windows 98; the vulnerability lies in the SMB authentication verification (cryptogra...

EUVD-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

CVE-1999-0153

CVE-1999-0153 corresponds to a Windows 95/NT vulnerability (WinNuke) where sending a NetBIOS OOB data packet to the affected host can cause a denial of service. The vulnerability is described across multiple sources (CVE records, Red Hat advisory, NVD/Nessus notes) as an out-of-band data DoS cond...

CVE-1999-0153

Windows 95/NT out of band OOB data denial of service through NETBIOS port, aka WinNuke...

Microsoft Internet Explorer 4 (Windows 95/NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's Internet Explorer. This ActiveX...

Microsoft Internet Explorer 4 (Windows 95NT 4.0) - Setupctl ActiveX Control Buffer Overflow

Microsoft Internet Explorer 4 Windows 95NT 4.0 - Setupctl ActiveX Control Buffer Overflow Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX...

MS_security_bulletin.txt

Subject: Microsoft Security Bulletin MS99-034 To: [email protected] The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-034...

windows.prn.flaw.txt

Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...

netscape.4.x-javascript.txt

Date: Wed, 28 Oct 1998 10:22:02 PST From: Georgi Guninski Subject: Javascript bug in Netscape Communicator 4.5 There is a bug in Netscape Communicator 4.5, 4.07, 3.04 under Windows 95 probably others which allows reading user's cache the urls the user has visited, including the info in GET forms...

sco.termvision.win95.txt

Date: Wed, 31 Mar 1999 16:50:13 +0100 From: JJ Gray To: [email protected] Subject: Potential vulnerability in SCO TermVision Windows 95 client Hi folks, I recently downloaded a trial version of the SCO TermVision terminal emulation package for SCO Openserver 5 and Windows 95...

csmproxy.txt

Date: Thu, 16 Jul 1998 15:22:24 -0400 From: Security Research Team Subject: S.A.F.E.R. Security Bulletin 980708.DOS.1.1 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 TITLE : Vulnerability with CSM Proxy 4.1 DATE : July 8, 1998 NATURE : Denial-of-Service PLATFORMS : Windows NT, Windows 95/98 DETAILS...

95replay.txt

L0pht Security Advisory Advisory released Jan. 5, 1999 Application: Windows 95/98 Network File Sharing Severity: Sniffed authentications can be used to impersonate network users Author: [email protected] http://www.l0pht.com/advisories.html Overview : Windows 95/98 network file sharing reuses the...