CVE-2001-0373

The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...

CVE-2001-0382

Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application...

MS01-008: NTLMSSP Local Privilege Escalation (280119)

The hotfix for the 'NTLMSSP Privilege Escalation' problem has not been applied. This hotfix corrects a problem in Windows NT that could allow a local process to execute code with the privileges of the NTLMSSP service provider. This vulnerability allows a malicious user, who has the right to log o...

[SNS Advisory No.31] Trend Micro InterScan VirusWall for Windows NT 3.51 FtpSaveC*P.dll Buffer Overflow Vulnerability

SNS Advisory No.31 Trend Micro InterScan VirusWall for Windows NT 3.51 FtpSaveCP.dll Buffer Overflow Vulnerability Problem first discovered: 30 May 2001 Published: 13 Jun 2001 Last Updated: 13 Jun 2001 ---------------------------------------------------------------------- Overview --------- A...

[SNS Advisory No.30] Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication

SNS Advisory No.30 Trend Micro InterScan VirusWall for Windows NT 3.51 reconfiguration without authentication Problem first discovered: 24 May 2001 Published: 12 Jun 2001 Last Updated:12 Jun 2001 ----------------------------------------------------------------------- Overview --------- It is...

alt3kx-advisories-2001.txt

====================================================================== QVT/NET 4.3 FTP server Directory Traversal Author: alt3kx! Date: 2001-05-22 Site: www.raza-mexicana.org Greet to: 0x90, drfdisk^, Dex, PaTa Teams: Raregazz - X-ploit and S0d vicente F0x no rulas wey!...

Netscape Enterprise Server 4 Method and URI overflow

Digizen Security Group advisory, 2001 Netscape Enterprise Server 4 Method and URI overflow Systems affected: Netscape Enterprise Server 4/SP7 possibly 4/SP3-SP7 running on Windows NT and Win2k Risk: Denial of Service Date: 18 May 2001 Vendor Notified: 25 April 2001 Legal Notice: This Advisory is...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)

iPlanet 4.1 Web Publisher - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (2)

iPlanet 4.1 Web Publisher - Remote Buffer Overflow 2 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...

def-2001-25: Carello E-Commerce Arbitrary Command Execution

====================================================================== Defcom Labs Advisory def-2001-25 Carello E-Commerce Arbitrary Command Execution Author: Peter Grьndl [email protected] Release Date: 2001-05-14 ======================================================================...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)

source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer overflow. This could cause the termination of the...

File locking and security

Topic : File locking and security Author : 3APA3A Affected software : Windows NT 4.0, Windows 2000 and may be another systems Exploitable : Yes Remotely exploitable : No Category : Design flaw Background: Application can lock the file after file description is open by application or in open call...

CVE-2001-0006

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...

CVE-2001-0017

Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability...

CVE-2001-0017

The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...

CVE-2001-0006

The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability...

CVE-2001-0006

The CVE-2001-0006 issue affects Windows NT 4.0 (and Terminal Server Edition) where the Winsock2ProtocolCatalogMutex has insecure Everyone/Full Control permissions. This allows a local user to modify the ACL to “No Access,” effectively disabling Winsock network connectivity and causing a denial of...

CVE-2001-0281

Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers possibly when called through DebugMessage, may allow local users to gain privileges...

cerberus.ftp.txt

Andrisk Security Advisory 2 - Cerberus FTP Server 1.05 Topic: Cerberus FTP Server 1.05 Announced: 2001-04-25 Affects: Cerberus FTP Server 1.05 OS : Win9x/NT I. Problem Description Cerberus FTP Server 1.05 is an FTP server for Windows 9x/NT. A bug allows view any files from remote computer. II...

GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow'

At 02:44 PM 4/23/2001, Alun Jones wrote: The latest version of WFTPD is vulnerable to a buffer overflow in the RETR and CWD commands. The overflow can be used to completely disable the FTP server, and can probably be exploited to run arbitrary code on the server host. Again, incorrect. The buffer...