Microsoft Windows NT 4.02000 - NTFS File Hiding

Microsoft Windows NT 4.02000 - NTFS File Hiding source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows...

Microsoft Windows NT 4.0/2000 - NTFS File Hiding

source: https://www.securityfocus.com/bid/3989/info There exists a condition in Microsoft Windows operating systems using NTFS that may allow for files to be hidden. Though the NTFS filesystem allows for a 32000 character path, Microsoft Windows operating systems NT4, 2000 and XP enforce a 256...

Microsoft Windows Server 2000 - RunAs Service Denial of Service

// source: https://www.securityfocus.com/bid/3291/info The Windows 2000 RunAs service allows an application or service to be executed as a different user. It is accessed by holding down the shift key and right mouse clicking on an icon, then selecting 'Run as...' from the context menu. When the...

CVE-2001-1388

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator...

DoS против Citrix MetaFrame (session request flood)

Сервер не позволяет устанавливать более 52 сеансов одновременно...

CVE-1999-1548

Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...

CVE-1999-1166

CVE-1999-1166 affects Linux 2.0.37 and is caused by not properly encoding the Custom segment limit, which allows local users to gain root privileges by accessing or modifying kernel memory. The connected documents reiterate the same description and do not provide a concrete remediation, workaroun...

CVE-1999-1166: Undefined Security Weakness

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory...

Проблема с лог-файлом в Samba (directory traversal)

При использовании лог-файлов с именами соответствующими NETBIOS-именам компьютером, если имся компьютера содержит ../ - будет перезаписан файл в директории более высокого уровня. NETBIOS-имя может содержать до 15 символов...

Personal Web Sharing remote stop

Personal Web Sharing Remote Stop. Versions affected: Personal Web sharing v1.5.5, probably earlier. Problem: Personal Web Sharing extension, which ships with MacOS 9, can't handle a request longer than 6000 characters. A request, which contains 6000 or more characters seems to stop the file...

DoS против ssh под windows

Некорректно отрабатывается ситуация с превышением количества одновременных подключений 64...

[!H] Tcpdump 3.5.2 remote root vulnerability

!Hispahack Research Team ------------------------ Program: Tcpdump 3.5 3.4, 3.6. and the CVS version are not vulnerable Platform: nix, Windoze Risk: Remote root access Author: Zhodiac [email protected] Date: 4/1/2001 - Problem: ----------- Tcpdump is a network packet analizer, capabel to decod...

Potential Security Problem in bftpd-1.0.11

Subject : Potential security problem in bftpd Buffer Overflow Author : Christophe BAILLEUX [email protected] Plateforms : nix Test version : bftpd-1.0.11 I. Introduction bftpd is a Linux FTP server with chroot and setreuid. Not all FTP commands are included. It accesses either the user's home directo...

CVE-2000-0584

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SRINIT command with a long user name or group name...

NetcPlus BrowseGate 2.80 - Denial of Service

NetcPlus BrowseGate 2.80 - Denial of Service source: https://www.securityfocus.com/bid/1702/info NetcPlus BrowseGate 2.80 will crash as the result of an invalid read error if a number of character strings consisting of 8 KB are inserted into GET request arguments through port 80. For example: GET...

Profile overwrite/delete due to registry size limit.

All, We have discovered a bug with NT v4.0-SP6a registry size growth and overwriting of user profiles. This bug was exposed when the SMS v2.0-SP2 client runs into a condition where it continually creates new registry keys and values filling the system registry with thousands of crap entries - thu...

Lockdown vulnerability - All versions

Release Date: May 4, 2000 Systems Affected: All machines running Lockdown Corporation's Lockdown AntiTrojan program ALL VERSIONS. Tested under Windows98. Results may vary under different operating systems, but all are vulnerable to the same problem. THE PROBLEM Lockdowns main display textbox can...

CVE-1999-1074

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking...

PT-1999-1646 · Dec · Openvms

Name of the Vulnerable Software and Affected Versions: Open VMS versions 5.3 through 5.5-2 Description: The issue allows attackers to conduct brute force password guessing due to improper disabling of access to user accounts that exceed the break-in limit threshold for failed login attempts. This...

CVE-1999-1548

Cabletron SmartSwitch Router SSR 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit...