Multiple Microsoft Windows Server service security vulnerabilities

Kernel mode heap overflow on mailslots processing. Information leak from SMB buffers...

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues ma...

Microsoft Windows Server Service RPC Request Buffer Overrun (MS06-040; CVE-2006-3439)

The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...

CVE-2006-3439: Undefined Security Weakness

Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314...

CVE-2006-3648: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."...

CVE-2006-3440: Undefined Security Weakness

Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."...

Microsoft Windows Server service buffer overflow

Overview A stack-based buffer overflow exists in the Microsoft Server service. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description Microsoft Server ServiceMS06-040 includes the following information: The Server service...

CVE-2006-3942: Improper Input Validation

The server driver srv.sys in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service system crash via an SMBCOMTRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the...

Heap overflow

Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...

CVE-2006-1300: Undefined Security Weakness

Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...

CVE-2006-2370: Undefined Security Weakness

Buffer overflow in the Routing and Remote Access service RRAS in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corrupti...

Microsoft Windows XP2003 - IGMP v3 Denial of Service (MS06-007) (1)

Microsoft Windows XP2003 - IGMP v3 Denial of Service MS06-007 1 / IGMP v3 DoS Exploit ref: http://www.juniper.net/security/auto/vulnerabilities/vuln2866.html ref: http://www.microsoft.com/technet/security/Bulletin/MS06-007.mspx by Alexey Sintsov [email protected] Req: Administrator rights on system...

CVE-2006-0021: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service hang via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."...

Microsoft Windows Korean Input Method Editor Privilege Escalation Vulnerability

Description Microsoft Windows Korean Input Method Editor is prone to a local privilege-escalation vulnerability. Successful exploitation can allow local attackers to completely compromise a vulnerable computer. Technologies Affected Microsoft Office 2003 Microsoft Office 2003 SP1 Microsoft Office...

CVE-2006-0008: Undefined Security Weakness

The ShellAbout API call in Korean Input Method Editor IME in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, whi...

CVE-2006-0013: Undefined Security Weakness

Buffer overflow in the Web Client service WebClnt.dll for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authenticated users or Guests to execute arbitrary code via crafted RPC requests, a different vulnerability than CVE-2005-1207...

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)

Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation MS05-055 / helper.c commented out below ms05-055.c /str0ke / / MS05-055 Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Exploit Created by SoBeIt 12.25.2005 Main file of exploit Tested on: Windows 2000 PRO...

Microsoft Windows Server 2000 - UPNP 'getdevicelist' Memory Leak Denial of Service

/ Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume memory to a point where the target machines virtual memory gets exhausted. This...

CVE-2005-1985: Undefined Security Weakness

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

CVE-2004-2365: Undefined Security Weakness

Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service memory exhaustion by repeatedly creating and deleting directories using a non-standard tool such as smbmount...