CVE-2004-0574

CVE-2004-0574 affects the NNTP component in Windows NT 4.0 Server, Windows 2000 Server, Windows Server 2003, Exchange 2000/2003, enabling remote code execution via XPAT pattern handling. The issue stems from improper length validation and unchecked buffers, leading to off-by-one and heap-based ov...

Multiple Microsoft Windows NT RPC bugs

No description provided...

Microsoft NNTP Component Heap Overflow Vulnerability

Description The Microsoft Network News Transfer Protocol NNTP Component is prone to a buffer overflow condition. Successful exploitation of this vulnerability could allow remote code execution in the context of the process accessing the vulnerable component. Technologies Affected Avaya DefinityOn...

MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)

Exploit for unknown platform in category remote exploits ============================================================ MS Windows JPEG GDI+ Remote Heap Overflow Exploit MS04-028 ============================================================ / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes...

Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)

Microsoft Windows - JPEG GDI+ Remote Heap Overflow MS04-028 / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the...

AOL Instant Messenger AIM - Away Message Remote (2)

AOL Instant Messenger AIM - Away Message Remote 2 / CAN-2004-0636 / / AIM Away Message Buffer Overflow Exploit Exploit by John Bissell A.K.A. HighT1mes Exploit: ======== drizzit.c Vulnerable Software: ==================== - AIM 5.5.3588 - AIM 5.5.3590 Beta - AIM 5.5.3591 - AIM 5.5.3595 and a coup...

CVE-1999-0718

The CVE-1999-0718 entries describe IBM GINA used for OS/2 domain authentication of Windows NT users, where local users can gain administrator privileges by changing the GroupMapping registry key. This is the explicit vulnerability mechanism: alteration of GroupMapping to escalate privileges. Conn...

CVE-1999-1217

Technical details about CVE-1999-1217 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-1999-0718

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key...

CVE-1999-1365

Technical details for CVE-1999-1365 are not publicly available in the provided documents. No vendor/product/version specifics or exploitation information are included here. Monitor for updates.

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

CVE-2002-1230

CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...

CVE-2003-0003

CVE-2003-0003 describes a locally/remotely exploitable buffer overflow in the Microsoft Locator service (RPC Locator) that allows arbitrary code execution when processing overly large RPC requests. Affected products include Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and...

CVE-1999-1217

The PATH in Windows NT includes the current working directory ., which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories...

CVE-2002-1319

The CVE-2002-1319 issue affects the Linux kernel on x86, specifically versions 2.4.20 and earlier and 2.5.x. The root cause is a flaw in emulation mode where TF and NT EFLAGS are not properly cleared, enabling a local user to cause a denial of service (hang). The impact is a local DoS without rem...

CVE-2003-0825

CVE-2003-0825 concerns the Windows Internet Naming Service (WINS) in Windows NT/2000/Server 2003 families, where malformed packets with improper lengths bypass WINS’ length validation. The result is a remote denial of service on Windows Server 2003 and, for older platforms, potential denial of se...

CVE-1999-1365

Windows NT searches a user's home directory %systemroot% by default before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program...

Windows NT FTP Server (WFTP) Pro Server < 3.21 Multiple Vulnerabilities

Binary data 1176.prm...

Generic Shell Detection (Windows NT Telnet)

Binary data 1933.prm...

[NGSEC-2004-6] IPD, local system denial of service.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: IPD, local system denial of service. ID: NGSEC-2004-6 Application: IPD up to 1.4 http://www.pedestalsoftware.com/ Date: 14/Aug/2004 Status: Vendor contacted on...