FW: DOS for Content Technologies' MAILsweeper for SMTP.

Hello, I have discovered a DOS for Content Technologies' MAILsweeper for SMTP product. This was completely accidental. I noticed that no mail was leaving the MAILsweeper SMTP gateway so I checked the queues... I had over 10,000 e-mails queued up! So I tried to stop the MIMEsweeper service, it...

Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases

Georgi Guninski security advisory 21, 2000 Double clicking on MS Office dpocuments from Windows Explorer may execute arbitrary programs in some cases Systems affected: MS Office 2000, Win98/Win2000 probably other applications Risk: Medium Date: 18 September 2000 Legal Notice: This Advisory is...

MS-SQL 'sa' user exploit code

Hi BugTraq-ers, It has come to light that it is now common knowledge that MS-SQL has a blank 'sa' password by default. This seems to affect a lot of servers on the internet. Since this knowledge has been made public by others, I'll release my program 'linsql' linux only -- ports anyone? which can...

Заткнута дырка в MS Office (Office HTML Script, Microsoft Office HTML Object Tag)

С помощью некоторых HTML-тагов OBJECT можно вызвать переполнение буфера при открытии HTML-документа в MS Office например, сохранив его как .doc...

word-access.txt

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

И еще одна проблема с паролями в MS SQL 7

При использовании Data Transformation Services пароль пользователя показывается в качестве поля типа password в одной из диалоговых форм, что позволяет его оттуда извлечь...

Уязвимость в BlackICE IDS

Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...

CVE-2000-0073

CVE-2000-0073 involves a buffer overflow in the Microsoft Rich Text Format (RTF) reader triggered by a malformed control word, leading to a denial of service. The affected software is the RTF reader component in Microsoft environments. The root cause is a buffer overflow condition, as described i...

Еще одна уязвимость в MS Index Server

С помощью запроса типа http://charon/null.htw?CiWebHitsFile=/default.asp20&CiRestriction=none&CiHiliteType=Full можно получить исходный текст .asp или любого другого скрипта...

CVE-1999-0360

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely...

CVE-1999-0280

CVE-1999-0280: Remote command execution in Microsoft Internet Explorer via crafted .lnk and .url files. Affected software: Internet Explorer. Root cause: loading or processing of .lnk/.url shortcuts can execute arbitrary commands with the user’s privileges. Documented across multiple sources (NVD...

CVE-1999-0749

The CVE-1999-0749 entry describes a buffer overflow in the Microsoft Telnet client for Windows 95/98 triggered by a malformed Telnet argument. The vulnerability concerns the Telnet client component (Windows 95/98) and is due to improper handling of a Telnet argument, leading to memory corruption....

Microsoft SQL Server Database Link Crawling Command Execution

This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...

windows.prn.flaw.txt

Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...

cuartangojc-clipboard-msie.txt

Date: Thu, 21 Jan 1999 15:59:15 +0100 From: Juan Carlos Garcia Cuartango To: [email protected] Subject: New IE4 privacy issue Greetings, There is a new IE 4 issue affecting privacy. The clipboard content can be made public by a javascript code two lines long. I reported the problem...

melissa.txt

http://www.melissavirus.com/ ----------------------------------------------------------------- Date: Mon, 5 Apr 1999 05:01:14 -0700 From: [email protected] Subject: Information Security Educators Mailing List 1999-03-30 --------------------------------------------- From: "Rob Slade, doting grandpa o...

nt.iis.odbc.vba.txt

Date: Tue, 25 May 1999 13:59:30 -0500 From: .rain.forest.puppy. To: [email protected] Subject: Advisory: NT ODBC Remote Compromise -- Advisory: NT ODBC Remote Compromise -- By Matthew Astley RCPS http://www.fruitcake.demon.co.uk -- & Rain Forest Puppy WireTrip [email protected] -- Brief Summary...

ms-proxy2.0-attack.txt

MSProxy 2.0 can be used to attack hosts on internal network Microsoft's Proxy server 2.0 can be used as a "gateway" to attack local networks from the outside, bypassing the proxy, even if IP forwarding is not enabled. MS Proxy has a bug that causes information whose origin is from an outside...

pptp.revisited.txt

Date: Sat, 13 Feb 1999 11:28:40 -0800 From: [email protected] To: [email protected] Subject: PPTP Revisited The following text is in the "iso-8859-1" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. Lots of people have aske...