nt.screensaver.token.txt

Date: Tue, 9 Mar 1999 12:57:42 -0800 From: Aleph One To: [email protected] Subject: Windows NT Screen Saver Vulnerability Cybermedia Software has found the following vulnerability: Screen Saver vulnerability Description: The Screen Saver is started by Winlogon.Exe whenever the machine is idle...

windows.prn.flaw.txt

Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...

websuite.txt

Advisory: Buffer overflow in SmartDesk WebSuite v2.1 Platforms Affected: Windows NT, Windows 98 Found by: cmart [email protected] Date: 5/23/99 Description: ----------- WebSuite v2.1 will crash when an additional 250+ characters is appended after the sites URL on NT Server 4 and NT Workstatio...

nmrctoken.txt

Date: Fri, 2 Oct 1998 01:04:20 -0500 From: Simple Nomad Subject: NMRC Advisory - Lame NT Token Ring DoS Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 30Sep1998 Platform : Windows NT Application : TCP/IP Severity : Medium Synopsis -------- On Token Ring...

nt4-ole-clipboard-password.txt

Date: Fri, 29 Jan 1999 10:21:51 -0600 From: "Reed, David" To: [email protected] Subject: ole objects in a "secured" environment? fellow 'noids, background: since all of the major security flaws in windows nt 4.0 have been discovered who am i kidding? ;-, i'd like to point out a min...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...

nukenabber-DoS.txt

------------------------------------ NOTE: NukeNabber 2.9 and earlier are vulnerable. nn29a.exe is NOT vulnerable. ------------------------------------ Date: Fri, 6 Nov 1998 01:46:17 -0600 From: [email protected] To: [email protected] Subject: various lame DoS attacks Aleph, None of...

nt.case.symbolic.txt

Date: Fri, 12 Mar 1999 13:03:57 -0700 From: Mark To: [email protected] Subject: ALERT Case Sensitivity and Symbolic Links Prasad Dabak of Cybermedia Software Private Limited has discovered yet another security risk in Windows NT involving the operating system's case sensitivity...

imail.passwd.txt

Date: Thu, 4 Mar 1999 22:30:42 -0800 From: Steven Alexander To: [email protected] Subject: IMAIL password recovery is trivial. The user passwords for Ipswitch's IMail server are stored in encryptedsorta form in the Windows NT registry...

ibm.netfinity.rcs.nt.txt

Date: Tue, 25 May 1999 13:05:56 -0400 From: Russ To: [email protected] Subject: Security Leak with IBM Netfinity Remote Control Software On May 10th, 1999, Thomas Krug reported to NTBugtraq; Hi, I found a method to run programs like regedit and user manager with admin right using t...

nt.explorer.DoS.txt

Date: Thu, 11 Feb 1999 11:25:01 -0800 From: Clifford Hammerschmidt To: [email protected] Subject: NT too? Re: Another Windows98 Bug... The following perl script will create a 250 character file that will crash WinNT service pack 3 explorer when right-clicked on: -------------------- $fn = 'A' ...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...

ftp.serv-u.2.5.bof.txt

Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...

csmproxy.txt

Date: Thu, 16 Jul 1998 15:22:24 -0400 From: Security Research Team Subject: S.A.F.E.R. Security Bulletin 980708.DOS.1.1 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 TITLE : Vulnerability with CSM Proxy 4.1 DATE : July 8, 1998 NATURE : Denial-of-Service PLATFORMS : Windows NT, Windows 95/98 DETAILS...

nt4.index.server.2.0.txt

Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...

pcm-dos-execute.txt

TITLE - Buffer Overflow in Platinum PCM 7.0 NATURE - Denial-of-Service, Remote Code Execution PLATFORMS - Windows NT 4.0 DETAILS: Policy Compliance Manager is a product that performs checks on the system, in order to ensure that security policies are enforced. It acts very much as a security...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

webcom.cgi.guestbook.txt

Date: Fri, 9 Apr 1999 20:41:39 +0100 From: Mnemonix To: [email protected] Subject: Webcom's CGI Guestbook for Win32 web servers I reported a while back on Webcom's www.webcom.se CGI Guestbook wguest.exe and rguest.exe having a number of security problems where any text based file o...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...

nt.rsh.rcp.txt

Date: Thu, 8 Apr 1999 19:11:54 -0700 From: Eric Gisin To: [email protected] Subject: rsh/rcp is not secure This is really a UNIX rshd bug, but it affects users of the NT clients. It's old news that the BSD rsh/rcp services are not secure, however rshd is still is enabled in many UN...