[CORE SDI ADVISORY] WinVNC server buffer overflow

CORE SDI http://www.core-sdi.com Vulnerability report for server overflow in ATT VNC for Windows Date Published: 2001-01-29 Advisory ID: CORE-2001011502 Bugtraq ID: 2306 CVE CAN: None currently assigned. Title; ATT VNC Windows Server Buffer Overflow Class: Boundary Error Condition Buffer Overflow...

[SPSadvisory#41]Apple Quick Time Plug-in Buffer Overflow

SPS Advisory 41 Apple Quick Time Plug-in Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://shadowpenguin.backsection.net -------------------------------------------------------------- Date July 31, 2001 Vulnerable QuickTime Player 4.1.2 for Windows Japanese Not...

CVE-2000-0991

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

Security Bulletin (MS00-073)

Microsoft Security Bulletin MS00-073 - -------------------------------------- Patch Available for "Malformed IPX NMPI Packet" Vulnerability Originally posted: October 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 95, Windows...

[COVERT-2000-10] Windows NetBIOS Unsolicited Cache Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory August 29, 2000 Windows NetBIOS Unsolicited Cache Corruption COVERT-2000-10 o Synopsis The Microsoft Windows implementation of the NetBIOS cache allows a remote attacker to insert and flush dynami...

CVE-2000-0305

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...

RFParalyze.txt

--/-----/-----/-----/-----/-----/-----/-----/-----/-----/-----/--- / / / e / - el8.org advisory / l / / 8 / - Evan Brewer / . / - Rain Forest Puppy / o / / r / - Synopsis: Cause undesired effects remotely against / g / win95,8 through an oddly formed winpopup message. / /...

vqsoft vqserver for windows 1.9.9 - Directory Traversal

source: https://www.securityfocus.com/bid/1067/info Some versions of vqSoft vqServer for Windows are vulnerable to the common ../../ method of retrieving known files from outside of the web directory structure, accomplished by appending a variable number of "../" and a known filename to an HTTP G...

CVE-1999-1584

Unknown vulnerability in 1 loadmodule, and 2 modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586...

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT...

Microsoft Windows 9598 - UNC Buffer Overflow (1)

Microsoft Windows 9598 - UNC Buffer Overflow 1 // source: https://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename...

CVE-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

Microsoft Windows 9598 NT Enterprise Server 4.0 SP5 NT Terminal Server 4.0 SP4 NT Workstation 4.0 SP5 - Denial of Service (2)

Microsoft Windows 9598 NT Enterprise Server 4.0 SP5 NT Terminal Server 4.0 SP4 NT Workstation 4.0 SP5 - Denial of Service 2 // source: https://www.securityfocus.com/bid/514/info The Windows 98 and Windows 2000 TCP/IP stacks were not built to reliably tolerate malformed IGMP headers. When one is...

PT-1999-1205 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT file system that is not NTFS. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-1999-1186 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue allows Windows NT to automatically log in an administrator upon rebooting. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (3)

/ source: https://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a "loopback" condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sort is received, an infinite loo...

Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service (1)

Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service 1 // source: https://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relati...

Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service (4)

Microsoft Windows 3.1195NT 4.0NT 3.5.1 - Out Of Band Data Denial of Service 4 source: https://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating ...

Microsoft Windows 3.11/95/NT 4.0/NT 3.5.1 - 'Out Of Band' Data Denial of Service (2)

source: https://www.securityfocus.com/bid/2010/info Older versions of Microsoft Windows 95, Windows for Workgroups 3.11, Windows NT up to and including 4.0, as well as SCO Open Server 5.0, have a vulnerability relating to the way they handle TCP/IP "Out of Band" data. According to Microsoft, "A...