4893 matches found
DebPloit (exploit)
DebPloit allows Everyone to get handle to Any process or thread. Handles have enough access to promote everyone to system/admin in the case Target is running under LocalSystem, Administrator account. Works on: Any MS Windows NT 4.0, Windows 2000 SPs before Mar-12-2002. Former NTs weren't tested...
CVE-1999-1291
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...
CVE-1999-1254
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables...
NetOP School Admin Vulnerability for Windows 2000 Terminal Services and NT4
NetOp School, a program for screen broadcast and remote control of Windows 3.1x, Windows 9x, Windows NT and Windows 2000 PCs including support for Windows 2000 Terminal Services and NT4 Terminal Server Edition across NetBIOS, IPX and TCP/IP. The problem arises in the way that netOP handles no...
Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (7)
source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...
CVE-2001-0191
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length...
HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...
[CORE SDI ADVISORY] WinVNC server buffer overflow
CORE SDI http://www.core-sdi.com Vulnerability report for server overflow in ATT VNC for Windows Date Published: 2001-01-29 Advisory ID: CORE-2001011502 Bugtraq ID: 2306 CVE CAN: None currently assigned. Title; ATT VNC Windows Server Buffer Overflow Class: Boundary Error Condition Buffer Overflow...
[SPSadvisory#41]Apple Quick Time Plug-in Buffer Overflow
SPS Advisory 41 Apple Quick Time Plug-in Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://shadowpenguin.backsection.net -------------------------------------------------------------- Date July 31, 2001 Vulnerable QuickTime Player 4.1.2 for Windows Japanese Not...
CVE-2000-0991
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability...
CVE-2000-0771
Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...
Security Bulletin (MS00-073)
Microsoft Security Bulletin MS00-073 - -------------------------------------- Patch Available for "Malformed IPX NMPI Packet" Vulnerability Originally posted: October 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 95, Windows...
[COVERT-2000-10] Windows NetBIOS Unsolicited Cache Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory August 29, 2000 Windows NetBIOS Unsolicited Cache Corruption COVERT-2000-10 o Synopsis The Microsoft Windows implementation of the NetBIOS cache allows a remote attacker to insert and flush dynami...
CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...
RFParalyze.txt
--/-----/-----/-----/-----/-----/-----/-----/-----/-----/-----/--- / / / e / - el8.org advisory / l / / 8 / - Evan Brewer / . / - Rain Forest Puppy / o / / r / - Synopsis: Cause undesired effects remotely against / g / win95,8 through an oddly formed winpopup message. / /...
vqsoft vqserver for windows 1.9.9 - Directory Traversal
source: https://www.securityfocus.com/bid/1067/info Some versions of vqSoft vqServer for Windows are vulnerable to the common ../../ method of retrieving known files from outside of the web directory structure, accomplished by appending a variable number of "../" and a known filename to an HTTP G...
CVE-1999-1584
Unknown vulnerability in 1 loadmodule, and 2 modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586...
Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow
Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT...
Microsoft Windows 9598 - UNC Buffer Overflow (1)
Microsoft Windows 9598 - UNC Buffer Overflow 1 // source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename...