145 matches found
[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow
Microsoft Windows LPC heap overflow AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/07-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A local...
CVE-2004-0893
This CVE describes two privilege-elevation flaws in Windows components from 2004: (1) the Local Procedure Call (LPC) interface in the Windows kernel fails to validate message lengths, enabling a locally-authenticated attacker to gain full control; and (2) LSASS validates identity tokens improperl...
CVE-2004-0893: Undefined Security Weakness
The Local Procedure Call LPC interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."...
CVE-2003-0232: Undefined Security Weakness
Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls LPC port that leads to a buffer overflow...
CVE-2001-0016
CVE-2001-0016 concerns the NTLMSSP (NTLM Security Support Provider) service. The LPC request handling bug allows a local user to gain administrator-level privileges by exploiting improper function-number checks, enabling local privilege escalation on affected Windows systems. Reported as MS01-008...
CVE-2001-0016: Undefined Security Weakness
NTLM Security Support Provider NTLMSSP service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access...
Многочисленные дырки в LPC Windows 2000/NT
Возможны несколько DoS атак, кроме того, можно подменить LPC-запрос получив доступ к контексту локальной машины...
Security Bulletin (MS00-070)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-070 - -------------------------------------- Patch...
Various security vulnerabilities with LPC ports
BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin [email protected] Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP...
MS00-070: LPC and LPC Ports Vulnerabilities patch (266433)
The hotfix for the 'Multiple LPC and LPC Ports Vulnerabilities' has not been applied on the remote Windows host. These vulnerabilities allow an attacker gain privileges on the remote host, or to crash it remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10525;...
bindview.lpc.txt
BindView Security Advisory -------- Various security vulnerabilities with LPC ports Issue Date: October 3, 2000 Contact: Todd Sabin Topic: LPC ports Overview: There are various flaws in the implementation of LPC ports. Affected Systems: Windows NT4 up to and including SP6a Window 2000 up to and...
Microsoft Windows NT 4.02000 - LPC Zone Memory Depletion Denial of Service
Microsoft Windows NT 4.02000 - LPC Zone Memory Depletion Denial of Service source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedu...
Microsoft Windows NT 4.02000 - Spoofed LPC Request (MS00-003)
Microsoft Windows NT 4.02000 - Spoofed LPC Request MS00-003 source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by...
Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities
Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RP...
Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)
Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service MS00-070 source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedur...
Microsoft Windows NT 4.0/2000 - Spoofed LPC Request (MS00-003)
source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by Bindview. The patch released by Microsoft...
Microsoft Windows NT 4.0 - Invalid LPC Request Denial of Service (MS00-070)
source: https://www.securityfocus.com/bid/1743/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The implementation of LPC...
Microsoft Windows NT 4.0/2000 - LPC Zone Memory Depletion Denial of Service
source: https://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. LPC allocates memory from...
Microsoft Windows NT 4.0/2000 Predictable LPC Message Identifier - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The structure of a messag...
