1001 matches found
SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file
Security Advisory Name: SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file. System Affected : Sql Server 7 & 2000, latest Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/11/2002 Advisory Number: CC070204 Overview: When installing Microsoft...
CVE-2002-0485
Affected software: Norton Anti-Virus (NAV). Vulnerability: attachments whose Content-Type and Content-Disposition headers are mixed upper/lower case can bypass content filtering, an issue observed by some mail clients. Root cause: header case sensitivity leads to filtering bypass. Impact: allows ...
CVE-2002-0485
Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...
CVE-2002-0485
Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...
PT-2002-1536 · Symantec · Norton Anti-Virus
Name of the Vulnerable Software and Affected Versions: Norton Anti-Virus NAV affected versions not specified Description: The issue allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignor...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. Multiple signedness errors mixed signed and unsigned numbers in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsy...
Microsoft SQL Server and Microsoft Data Engine (MSDE) ship with a null default password
Overview Microsoft SQL Server and Microsoft Data Engine ship with a null default password on the administrative account sa. If the system administrator does not set the password, the system may be vulnerable to attack. Description Microsoft SQL Server MS SQL and Microsoft Data Engine MSDE ship...
CVE-2001-0344: Undefined Security Weakness
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account...
Проблема кэшированных подключений в MS SQL (cached connections)
При исопльзовании mixed mode административное подключение к SQL-Серверу остается кэшированным в течение некоторого времени в случае непредвиденного отключения администратора. В этом случае оно может быть перехвачено...
Security Bulletin MS01-032
---------------------------------------------------------------------- Title: SQL Query Method Enables Cached Administrator Connection to be Reused Date: 12 June 2001 Software: Microsoft SQL Server 2000 and SQL Server 7.0 Impact: Privilege elevation Bulletin: MS01-032 Microsoft encourages...
CVE-2000-0311
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...
CVE-2000-0311: Undefined Security Weakness
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...
CVE-2000-0402: Undefined Security Weakness
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
Security Bulletin (MS00-035)
Microsoft Security Bulletin MS00-035 - -------------------------------------- Patch Available for "SQL Server 7.0 Service Pack Password" Vulnerability May 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr SQL Serverr 7.0 Service Packs 1...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
Microsoft Security Bulletin (MS00-026)
Microsoft Security Bulletin MS00-026 ====================================== Patch Available for "Mixed Object Access" Vulnerability Originally Posted: April 20, 2000 Summary - ------- Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000 that could,...
CVE-2000-0311
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...
Security update 1970-01-01
...