Проблема с отладочными регистрами в Windows 2000 (debug registers privelege elevation)

Используя отладочные регистры DR0-DR7 можно "убить" привелегированный процесс и перехватить его именованные каналы, получив системные права...

CVE-2000-0737

The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...

CVE-2000-0737

The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...

CVE-2000-0737

The CVE-2000-0737 entry describes a vulnerability in the Windows 2000 Service Control Manager (SCM) where SCM creates predictable named pipes for system services. This behavior can be abused by a local user with console access to impersonate services and gain administrator privileges. The impact ...

Security Bulletin (MS00-053)

Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...

Уязвимость в services.exe Windows 2000

Локальный пользователь может создать приложение, которое "перехватит" именованный канал регистрируемый сервисом, таком образом получив возможность оперировать в контексте операционной системы...

Microsoft Windows Server 2000 - Named Pipes Predictability

source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...

Microsoft Windows Server 2000 - Named Pipes Predictability

Microsoft Windows Server 2000 - Named Pipes Predictability source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBoo...

CVE-1999-0851

Denial of service in BIND named via naptr...

CVE-1999-0849

Denial of service in BIND named via maxdname...

CVE-1999-0849

CVE-1999-0849 describes a denial-of-service condition in BIND's named component triggered by maxdname. Connected sources specify affected versions: ISC BIND

CVE-1999-0848

CVE-1999-0848 concerns a denial-of-service in ISC BIND’s named daemon caused by consuming more than the configured fdmax file descriptors. This is confirmed by the NVD entry and Red Hat security page, both citing the same DoS vector. The provided connected documents do not specify exact affected ...

CVE-1999-0835

CVE-1999-0835 describes a denial-of-service in BIND named caused by a buffer overflow in the rrextract routine when decoding SIG records. In particular, for T_SIG, the code computes an unsigned length and copies data with a potentially large third argument to memcpy if the computed length is malf...

PT-1999-1585 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT version 4.0 Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of...

CVE-1999-0849

Denial of service in BIND named via maxdname...

CVE-1999-0848

Denial of service in BIND named via consuming more than "fdmax" file descriptors...

CVE-1999-0851

Denial of service in BIND named via naptr...

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 - 'Services.exe' Denial of Service (1)

source: https://www.securityfocus.com/bid/754/info A specially crafted packet can cause a denial of service on an NT 4.0 host, rendering local administration and network communication nearly unusable. This attack will crash the "services" executable, which in turn, disables the ability for the...

CVE-1999-1013

named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file...

PT-2005-5611 · Pcre +1 · Libpcre +4

Name of the Vulnerable Software and Affected Versions: PCRE library versions prior to 6.7 libpcre versions prior to 7.3-r1 pcre-32bit affected versions not specified pcre affected versions not specified pcre-devel affected versions not specified Description: The issue is related to an integer...