MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (326886)

The remote host contains a flaw in the Network Connection Manager that may allow a local user to elevate his privileges. To exploit this vulnerability, a user needs to send a specially- crafted code to the Network Manager handle to execute arbitrary code with the privileges of the SYSTEM. C Tenab...

Windows 2000 Network Connection Manager privelege escalation

Callback function is called with system priveleges...

Security Bulletin MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886)

---------------------------------------------------------------------- Title: Flaw in Network Connection Manager Could Enable Privilege Elevation Q326886 Date: 14 August 2002 Software: Microsoft Windows 2000 Impact: Privilege elevation Max Risk: Critical Bulletin: MS02-042 Microsoft encourages...

Microsoft Windows Network Connection Manager (NCM) handler routine may execute code with LocalSystem privileges

Overview A locally exploitable vulnerability exists in the Microsoft Windows 2000 Network Connection Manager NCM. Exploitation of this vulnerability may permit a local user to gain full privileges on the system. Description Microsoft Windows 2000 Network Connection Manager NCM provides routines t...

CVE-2000-1180

Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument...

CVE-2000-1180: Undefined Security Weakness

Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument...

vulnerability in Connection Manager Control binary in Oracle 8.1.5 Linux Platform.

Hello Elias Colud you make public this advisory. Oracle people dont send an answer in 6 days. Please cut this lines. Thanks WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in cmctl in Oracle 8.1.5 Date: 13-11-2000 Platform: Only tested in Linux, but can be exported to others...

Security Update (326886)

This update resolves the "Flaw in Network Connection Manager" security vulnerability in Windows 2000. Download now to help prevent a malicious user from gaining elevated privileges through the Network Connection Manager, and then running code of his or her choice on your computer...