Уязвимость в NT - относительнный путь к оболочке пользователя.

По-умлочанию explorer.exe ищется в корневой директории системного раздела, что позволяет подменить его и таким образом запустить приложение с правами другого пользователя...

CVE-2000-0304

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

Alibaba get32.exe Arbitrary Command Execution

The 'get32.exe' CGI script is installed on this machine. This CGI has a well known security flaw that allows an attacker to execute arbitrary commands on the remote system with the privileges of the HTTP daemon typically root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-1999-0227

Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...

serve-U.DoS.txt

Date: Thu, 11 Feb 1999 21:36:13 -0600 From: Ryan Sweat To: [email protected] Subject: Buffer overflow in Serve-U I have successfully reprocuded this overflow in the newest Version of Serve-U. It totally crashes the ftp program, and also causes stack fault module in tcp/ip stack rendering the...

windows.backdoors.txt

Date: Fri, 19 Feb 1999 20:02:46 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Vulnerability Alert: Windows Backdoors Update II TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any...

ms.winhelp.exploit.txt

Date: Mon, 24 May 1999 07:18:23 +0100 From: Mnemonix To: [email protected] Subject: Exploit and Analysis of the Winhlp32.exe buffer overrun. Analysis of the winhlp32.exe buffer overrun. The buffer overrun in winhlp32.exe occurs when it attempts to read a cnt file with an overly lon...

CVE-1999-0191

IIS newdsn.exe CGI script allows remote users to overwrite files...