MS04-028 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'X' and a blank password. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account. This probably means that the remote host has been compromised by the use of this...

Immunity Canvas: MS04_011_SSLPCT

Name| ms04011sslpct ---|--- CVE| CVE-2003-0719 Exploit Pack| CANVAS Description| Microsoft SSL PCT Hello Overflow Notes| References: http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx CVE Name: CVE-2003-0719 VENDOR: Microsoft Notes: Repeatability: One shot MSADV: MS04-011-SSL-PCT Da...

Multiple Vendor - TCP Sequence Number Approximation (3)

Multiple Vendor - TCP Sequence Number Approximation 3 source: https://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit...

EEYE: Microsoft ASN.1 Library Bit String Heap Corruption

Microsoft ASN.1 Library Bit String Heap Corruption Release Date: February 10, 2004 Date Reported: September 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Description: eEye Digital...

MS03-039 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...

[Full-Disclosure] MS03-039 - Exploit ...

from nessus lol The script code starts here function dcomrecvsocket localvar buf, len; buf = recvsocket:socket, length:10; ifstrlenbuf != 10return NULL; len = ordbuf8; len += ordbuf9256; buf += recvsocket:socket, length:len - 10; return buf; port = 135; if!getportstateportport = 593; else soc =...

Immunity Canvas: MSSQLHELLO

Name| mssqlhello ---|--- CVE| CVE-2002-1123 Exploit Pack| CANVAS Description| MSSQL Hello Stack Overflow MS02-056 Notes| References: 'http://marc.theaimsgroup.com/?l=bugtraq&m=102865925419469&w=2', 'http://marc.theaimsgroup.com/?l=bugtraq&m=102873609025020&w=2',...

Windows mplay32 buffer overflow

Microsoft is aware of the vulnerability. Since this successful remote exploitation of this vulnerability depends on other mitigating factors, Microsoft believes it is not worthy of a bulletin. This overflow will be fixed in XP service pack 1. I will explain my understanding of the vulnerability...

Immunity Canvas: IIS_DOUBLEDECODE

Name| iisdoubledecode ---|--- CVE| CVE-2001-0333 Exploit Pack| CANVAS Description| iisdoubledecode MS01-026 Notes| CVE Name: CVE-2001-0333 VENDOR: Microsoft Notes: The IIS Double Decode module will automatically use tftp to get a MOSDEF node on the remote target. This will not work through a...

reboot.ini-passwds.txt

Date: Fri, 12 Feb 1999 14:34:17 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-005 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...

CVE-2017-1018

...

Security Update for Windows Server 2003 x64 Edition (KB956841)

A security issue has been identified that could allow an authenticated local attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...

Security Update for Windows Server 2003 (KB828028)

A security issue has been identified in Microsoft Windows-based systems that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may need t...

Security Update for Windows Vista (KB931213)

A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Once you have...

Security Update for Windows Server 2003 (KB908519)

A security issue has been identified that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...

Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)

A security issue has been identified that could allow an attacker to compromise a computer running Microsoft Outlook Express and gain control over it. User interaction is required to exploit this vulnerability. You can help protect your computer by installing this update from Microsoft. After you...

Q328310: Security Update (Windows 2000)

A security vulnerability has been identified that could allow an attacker to compromise a Windows-based computer and gain complete control over it. The attacker would need the ability to log onto the computer to carry out an attack. You can help protect your computer from this specific...