nerf.iis.dos.txt

--== NERF gr0up security advisory 4 ==-- MS IIS local and remote DoS 1. Vulnerable soft: IIS 4,5 2. Description: Openning and reading of device files com1, com2, etc. using Scripting.FileSystemObject will crash ASP-processor asp.dll. 3. Local exploit: If you have permission on creating .asp-file,...

CVE-2001-1249

vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names...

CVE-2001-0493

Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux...

Perception LiteServe MS-DOS filename vulnerability

Perception LiteServe http://www.cmfperception.com/liteserve.html is a Web, FTP and e-Mail server for Win. When GET requests are made to LiteServe's webserver with the name of the cgi-bin directory as a MS-DOS directory name eg. cgi-shizznitch=CGI-SH1 and cgi-bin=CGI-BIN, LiteServe will read the...

Очередной способ обойти защиту от макросов в MS Word (Macro protection bypass)

Можно "повредить" документ таким образом, что сканер не распознает макрос, но при открытии макрос все равно будет выполнен...

Проблема кэшированных подключений в MS SQL (cached connections)

При исопльзовании mixed mode административное подключение к SQL-Серверу остается кэшированным в течение некоторого времени в случае непредвиденного отключения администратора. В этом случае оно может быть перехвачено...

Faust Informatics FreeStyle Chat 4.1 SR2 MS-DOS Device Name - Denial of Service

Faust Informatics FreeStyle Chat 4.1 SR2 MS-DOS Device Name - Denial of Service source: https://www.securityfocus.com/bid/2777/info A problem with the chat server makes it possible to deny service to legitmate users. By submitting a request to the webserver including the 'AUX' MS-DOS device name,...

Faust Informatics FreeStyle Chat 4.1 SR2 MS-DOS Device Name - Denial of Service

source: https://www.securityfocus.com/bid/2777/info A problem with the chat server makes it possible to deny service to legitmate users. By submitting a request to the webserver including the 'AUX' MS-DOS device name, the webserver can be made to cease functioning. The process has to be manually...

Hexyn / Securax Advisory #18 - Savant WWW Unicode Directory Traversal

Hexyn / Securax Advisory 18 - Savant WWW Unicode Directory Traversal Topic: Savant WWW Unicode Directory Traversal Announced: 2001-02-17 Affects: Savant WWW Unicode version 2.1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit (2)

Exploit for unknown platform in category remote exploits ===================================================================== MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit 2 ===================================================================== / IIS 5 remote .printer overflow...

T. Hauck Jana Server 1.451.462.0 - MS-DOS Device Name Denial of Service

T. Hauck Jana Server 1.451.462.0 - MS-DOS Device Name Denial of Service source: https://www.securityfocus.com/bid/2704/info Versions of Jana Server are vulnerable to a denial of service attack. It is possible to remotely crash a system running Jana Server by submitting a URL request which specifi...

Hexyn-sa-18.txt

Hexyn / Securax Advisory 18 - Savant WWW Unicode Directory Traversal Topic: Savant WWW Unicode Directory Traversal Announced: 2001-02-17 Affects: Savant WWW Unicode version 2.1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...

Дырка в MS DAC (Internet Publishing Provider)

Можно заставить клиента выполнить WebDAV-запрос...

Проблемы с MS ActiveSync (locked workstation access)

Можно получить доступ к заблокированной рабочей станции...

QPC POPd Buffer Overflow Vulnerability

Strumpf Noir Society Advisories ! Public release ! -- -= QPC POPd Buffer Overflow Vulnerability =- Release date: Saturday, April 14, 2001 Introduction: QPC's popd is the pop3 mailserver component of the company's QVT/NET product line for MS Windows. The popd and the rest of the QVT/Net product li...

QPC FTPd Directory Traversal and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= QPC FTPd Directory Traversal and BoF Vulnerabilities =- Release date: Saturday, April 14, 2001 Introduction: QPC's ftpd is the ftp server component of the company's QVT/NET and QVT/Term software suites for MS Windows. The ftpd and the rest ...

MS patch Q292108 opens a vulnerability

Hi, Last MS patch Q290108 released with the bulletin MS01-020 opens a new vulnerability. A tricked EML file can confuse the user displaying him a fake downlodaded file name. Executable files can be disguised as other supposedly inocent files text, sound or images. Demo is available in :...

SEDUM v2.1 HTTPd - Denial of Service

Introduction: SEDUM is a standard HTTP server designed for Internet/Intranet purposes. SEDUM support parametric html files and direct access to databases for a simple and powerful network data management. This software is for the MS operating system. The Vendors website is:...

MS Windows (Jolt2.c) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================== MS Windows Jolt2.c Denial of Service Exploit ============================================== / File: jolt2.c Author: Phonix Date: 23-May-00 Description: This is the proof-of-concept code for the Windo...

MS Windows IIS Unicode Remote Transversal Bug (4)

Exploit for unknown platform in category remote exploits ================================================= MS Windows IIS Unicode Remote Transversal Bug 4 ================================================= !/usr/bin/perl See http://www.securityfocus.com/vdb/bottom.html?section=exploit&vid=1806 Ver...