3945 matches found
CVE-1999-1006
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter...
CVE-1999-1006: Undefined Security Weakness
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter...
CVE-1999-0975
The CVE-1999-0975 entry describes a local privilege escalation in the Windows Help system: by editing a table of contents metafile (.CNT) and altering the topic action, a local user could cause commands to execute when the .hlp file is opened. The remediation/affected product details beyond this ...
CVE-1999-0716
CVE-1999-0716 is a historical vulnerability described across multiple sources as a buffer overflow in Windows NT 4.0’s help file utility triggered by a malformed help file. The Red Hat advisory and CVE entries confirm the issue but do not provide concrete exploit details beyond the basic descript...
CVE-1999-0716
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...
CVE-1999-0975
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed...
CVE-1999-0716: Undefined Security Weakness
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...
CVE-1999-0975: Undefined Security Weakness
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed...
CVE-1999-1006
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter...
CVE-1999-0975
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed...
Microsoft Windows 95/98/NT 4.0 - Help File Backdoor
source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. The .cnt files are like tables of contents that tell...
Microsoft Windows 9598NT 4.0 - Help File Backdoor
Microsoft Windows 9598NT 4.0 - Help File Backdoor source: https://www.securityfocus.com/bid/868/info The help files for the Windows Help system .cnt, .hlp can be edited so that they run an arbitrary executable when selected by a user. The executable will run at the privelege level of the user. Th...
ms.winhlp32.exe.bof.txt
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...
openlinux.lisa.help.txt
Date: Sat, 8 May 1999 23:46:40 -0400 From: Andrew McRory To: [email protected] Subject: OpenLinux 2.2: LISA install leaves root access without password Hello, I believe I've found a bug in the installation process of OpenLinux 2.2 when using the LISA boot disk. During the installation a...
CVE-1999-0716
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - Help File Buffer Overflow // source: https://www.securityfocus.com/bid/261/info // // Lax permission in the Windows NT help file folder and a buffer overflow in the Help utility may allow malicious users to gain Administrator privilege...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - Help File Buffer Overflow
// source: https://www.securityfocus.com/bid/261/info // // Lax permission in the Windows NT help file folder and a buffer overflow in the Help utility may allow malicious users to gain Administrator privileges. // // The Windows NT Help utility parses and displays help information for selected...
CVE-1999-0531
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...