Security Bulletin (MS00-086)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-086 - -------------------------------------- Patch...

Wang/Kodak Image Annotation ActiveX Control

Overview Description The Image Annotation control is incorrectly marked safe for scripting. This control is sometimes identified as from "Kodak" and other times as from "Wang". The Image Annotation control is one of several controls used to provide image editting services through a web site...

New Allaire Security Zone Bulletins Posted

Dear Allaire Customer -- New security issues that may affect Allaire customers have recently come to our attention. Please visit the Security Zone at the Allaire Web site to learn about these new issues and what actions you can take to address them: http://www.allaire.com/security This week we...

Security Bulletin (MS00-079)

Microsoft Security Bulletin MS00-079 - - -------------------------------------- Patch Available for "HyperTerminal Buffer Overflow" Vulnerability Originally posted: October 18, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the HyperTerminal...

Security Bulletin (MS00-074)

Microsoft Security Bulletin MS00-074 - -------------------------------------- Patch Available for "WebTV for Windows Denial of Service" Vulnerability Originally posted: October 11, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr WebTV for...

HHControl Object (showHelp) may execute shortcuts embedded in help files

Overview The HHCtrl ActiveX control has a serious vulnerability that allows remote intruders to execute arbitrary code, if the intruder can cause a compiled help file CHM to be stored "locally." Microsoft has released a security bulletin and a patch for this vulnerability, but the patch does not...

MS00-067: Telnet Client NTLM Authentication Vulnerability (272743)

The hotfix for the 'Telnet Client NTLM Authentication' problem has not been applied. This vulnerability may, under certain circumstances, allow a malicious user to obtain cryptographically protected login credentials from another user. C Tenable Network Security, Inc. include"compat.inc"; if...

Security Bulletin (MS00-067)

Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...

MS00-065: Still Image Service Privilege Escalation patch (272736)

The hotfix for the 'Still Image Service Privilege Escalation' problem has not been applied. This vulnerability allows a malicious user, who has the right to log on this host locally, to gain additional privileges on this host. C Tenable Network Security, Inc. include"compat.inc"; if description...

MS00-006: Microsoft IIS IDA/IDQ Multiple Vulnerabilities (uncredentialed check)

The remote version of IIS is affected by two vulnerabilities : - An information disclosure issue allows a remote attacker to obtain the real pathname of the document root by requesting nonexistent files with .ida or .idq extensions. - An argument validation issue in the WebHits component lets a...

"Absent Directory Browser Argument" DoS

"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....

VIGILANTE-2000003.txt

"Absent Directory Browser Argument" DoS Advisory Code: VIGILANTE-2000003 Release Date: July 15, 2000 Systems Affected: Internet Information Server 4.0 for NT upgraded from IIS 3.0 Internet Information Server 5.0 for NT upgraded from IIS 3.0 THE PROBLEM A system with Internet Information Server 4....

Security Bulletin (MS00-042)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Patch Available for "Active Setup Download" Vulnerability Originally Posted: June 29,...

Microsoft Windows Media Services 4.04.1 - Denial of Service (MS00-038)

Microsoft Windows Media Services 4.04.1 - Denial of Service MS00-038 // source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. I...

Microsoft Windows Media Services 4.0/4.1 - Denial of Service (MS00-038)

// source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. If a specially malformed request is sent to the Windows Media Encoder ...

Microsoft Internet Explorer 4.0/5.0/5.5 preview/5.0.1 - DocumentComplete() Cross Frame Access

source: https://www.securityfocus.com/bid/1224/info The DocumentComplete function in IE does not properly validate origin domains. Therefore it is possible for a remote webserver to gain read access to local files on the machine of any website visitor or email recipient by accessing the browser...

Microsoft Internet Explorer 4.05.05.5 preview5.0.1 - DocumentComplete() Cross Frame Access

Microsoft Internet Explorer 4.05.05.5 preview5.0.1 - DocumentComplete Cross Frame Access source: https://www.securityfocus.com/bid/1224/info The DocumentComplete function in IE does not properly validate origin domains. Therefore it is possible for a remote webserver to gain read access to local...

Security Bulletin (MS00-031)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-031 - -------------------------------------- Patch...

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT...

ActiveX_bof.txt

ActiveX Buffer Overruns Advisory Disclaimer: I'm not responsible for anything, unless it's good. This advisory outlines several buffer overruns in several controls, and the vulnerability of ActiveX controls to buffer overrun attacks in general. It appears that the ActiveX/OLE/COM technology in...