[CORE SDI ADVISORY] MS Windows NT4 and Windows 2000 Phonebook Service overflow

CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft PhoneBook Server overflow Date Published: December 4th, 2000 Advisory ID: CORE-20001204 Bugtraq ID: 2048 CVE CAN: None currently assigned. Title: Microsoft PhoneBook Server buffer overflow Class: Boundary condition error Remotely...

bindview.nt-local.txt

BindView Security Advisory -------- Local Promotion Vulnerability in Windows NT 4 Issue Date: January 13, 2000 Contact: Todd Sabin Topic: Problem in NtImpersonateClientOfPort system call on NT 4 Overview: Due to a flaw in the NtImpersonateClientOfPort Windows NT 4 system call, any local user on a...

windows_phonedialer_bof.txt

Subject: Alert: Microsoft's Phone Dialer contains a buffer overrun that allows execution of arbitary code To: [email protected] Microsoft's Phone Dialer on Windows NT 4 all service packs contains a buffer overrun vulnerability that allows an attacker to run arbitary code in another user's...

ntbufferoverruns.txt

Exploiting Windows NT 4 Buffer Overruns A Case Study: RASMAN.EXE Introduction This document is for educational purposes only and explains what a buffer overrun is and shows how they can be exploited on the Windows NT 4 operating system using RASMAN.EXE as a case study. We will take a look at...