Cold Fusion Server 4.5.1 DoS Vulnerability.

Exploit Announcement Title: Cold Fusion Server 4.5.1 Denial-of-Service Attack using CFCACHE. OS: Windows NT 4.0 Affected Product Versions: Cold Fusion Server 4.5.x, Professional & Enterprise. - Acknowledgements Thanks are due to Patrick Keating, for his help diagnosing and discovering this issue...

Microsoft Windows SMB Registry : NT4 Service Pack Version Detection

Nessus was able to determine the Service Pack version of the Windows NT system by reading the following registry key : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10401; scriptversion"1.56";...

Trend Micro InterScan VirusWall Remote Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...

Ussr Labs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in CASSANDRA NNTPServer v1.10 from ATRIUM SOFTWARE Vulnerability USSR Advisory Code: USSR-2000039 Release Date: May 1, 2000 Systems Affected: CASSANDRA NNTPServer Version v1.10 WinNT / Win95 THE PROBLEM The Ussr Labs Team has recentl...

L-Soft Listserv 1.8 - Web Archives Buffer Overflow

L-Soft Listserv 1.8 - Web Archives Buffer Overflow // source: https://www.securityfocus.com/bid/1167/info The Web Archive component of L-Soft Listserv contains unchecked buffer code exploitable by sending specially crafted requests to the Web Archive. This weakness will allow execution of arbitra...

Cartfix Secret Backdoor Patch tool for cart32

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...

CVE-2000-0259

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users...

CVE-2000-0259

The CVE describes a permission misconfiguration in Windows NT 4.0 related to the Cryptography\Offload registry key used by OffloadModExpo. The default permissions allow local users to access cryptographic keys of other users, enabling compromise of confidentiality and integrity of those keys. No ...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...

CVE-1999-0824

CVE-1999-0824 involves Windows NT where a user can use SUBST to map a drive letter to a folder. This mapping is not unmapped after log off, potentially allowing the affected user to influence the location of folders accessed by later users. The description covers the mapping behavior and its pers...

CVE-2000-0070

CVE-2000-0070 affects Windows NT 4.0 via the NtImpersonateClientOfPort local procedure call, enabling local privilege escalation. The vulnerability allows a local user to gain complete control (confidentiality, integrity, and availability flags impacted) through impersonation of a port request. T...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CMD.EXE overflow (CISADV000420)

Cerberus Information Security Advisory CISADV000420 http://www.cerberus-infosec.co.uk/advisories.html Released : 20th April 2000 Name : CMD.EXE overflow Affected Systems : Windows NT/2000 Issue : See details Author : David Litchfield [email protected] Description The Cerberus Security Team...

Microsoft Security Bulletin (MS00-027)

Microsoft Security Bulletin MS00-027 - -------------------------------------- Patch Available for "Malformed Environment Variable" Vulnerability Originally Posted: April 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0...

Security Bulletin (MS00-024)

Microsoft Security Bulletin MS00-024 - -------------------------------------- Tool Available for "OffloadModExpo Registry Permissions" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a tool that installs tighter permissions on a Windows NTr 4.0 registry key...

CVE-2000-0259

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users...

CVE-1999-0701

After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password...

Слабое шифрование пароля в PC Anywhere

По-умолчанию используется шифрование паролей тривиальным методом, пароль может быть перехвачен и полностью восстановлен. Перехваченный пароль является паролем учетной записи Windows NT...

DoS-атака на сервис печати TCP/IP Windows NT

При получении определенного пакеты в порт TCP/515 printer сервис печати TCP/IP умирает вместе с несколькими другими сетевыми сервисами SimpTCP, DHCPServer, FTPSvc, LPDSvc, BinlSvc...

Apple WebObjects Developer NT4 IIS4.0 CGI-adapter 4.5 - Developer Remote Overflow

Apple WebObjects Developer NT4 IIS4.0 CGI-adapter 4.5 - Developer Remote Overflow source: https://www.securityfocus.com/bid/1896/info A denial-of-service vulnerability exists in Apple's WebObjects 4.5 Developer, a popular platform for developing web-based applications. The vulnerable version is...