CVE-2004-0123

CVE-2004-0123 (ASN.1 “Double Free”) affects Windows platforms including NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The issue is a potential memory-management error caused by a possible double-free condition in the Microsoft ASN.1 Library, which could lead to memory corruption and,...

[Full-Disclosure] EEYE: Windows VDM TIB Local Privilege Escalation

Windows VDM TIB Local Privilege Escalation Release Date: April 13, 2004 Date Reported: February 9, 2004 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a second local privilege...

Microsoft Windows ASN.1 library contains a memory management vulnerability

Overview Microsoft's ASN.1 library contains a memory management error that could be exploited by a remote attacker to cause a denial-of-service situation, or execute arbitrary code. Description Microsoft's ASN.1 library contains a memory management error, potentially a "double-free" condition. By...

[Full-Disclosure] EEYE: Windows Expand-Down Data Segment Local Privilege Escalation

Windows Expand-Down Data Segment Local Privilege Escalation Release Date: April 13, 2004 Date Reported: November 21, 2003 Severity: Medium Local Privilege Escalation to Kernel Vendor: Microsoft Systems Affected: Windows NT 4.0 Windows 2000 Description: eEye Digital Security has discovered a...

[Full-Disclosure] EEYE: Microsoft DCOM RPC Race Condition

Microsoft DCOM RPC Race Condition Release Date: April 13, 2004 Date Reported: September 10, 2003 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Server 4.0 Microsoft Windows NT Server 4.0, Terminal Server Edition...

Vulnerabilities in Member Management System 2.1

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

CVE-2003-0818

Multiple integer overflows in Microsoft ASN.1 library MSASN1.DLL, as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with 1 very large length fields that cause...

buffer overflow in Robot FTP Server

Application: Robot FTP Server http://www.robotftp.com/ Versions: 1.0/2.0 beta 1 Platforms: Windows NT Bug: Buffer Overflow Exploitation: remote Date: 15 Feb 2004 Author: gsicht e-mail: [email protected] 1 Introduction 2 Bug 3 The Code =============== 1 Introduction =============== Quoute...

robotFTP.txt

Application: Robot FTP Server http://www.robotftp.com/ Versions: 1.0/2.0 beta 1 Platforms: Windows NT Bug: Buffer Overflow Exploitation: remote Date: 15 Feb 2004 Author: gsicht e-mail: [email protected] 1 Introduction 2 Bug 3 The Code =============== 1 Introduction =============== Quoute...

crobftp.txt

Application: Crob FTP daemon http://www.crob.net/en/ Versions: 2.5.2 maybe others Platforms: Windows NT Bug: Denial of Service Exploitation: remote Date: 12 Feb 2004 Author: gsicht e-mail: [email protected] 1 Introduction 2 Bug 3 The Code =============== 1 Introduction =============== Quou...

CVE-2003-0818

CVE-2003-0818 covers a heap-based overflow in the Microsoft ASN.1 library (MSASN1.DLL) used by Windows components (LSASS.EXE, CRYPT32.DLL) on Windows NT 4.0/2000/XP. The vulnerability affects BER decoding of ASN.1 data, with two vectors: (1) very large length fields overwriting heap data, and (2)...

CVE-2003-0818

Multiple integer overflows in Microsoft ASN.1 library MSASN1.DLL, as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with 1 very large length fields that cause...

Dream FTP 1.2 Remote Format String Exploit

Exploit for unknown platform in category remote exploits ========================================== Dream FTP 1.2 Remote Format String Exploit ========================================== include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation:...

EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

Microsoft ASN.1 Library Length Overflow Heap Corruption Release Date: February 10, 2004 Date Reported: July 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Software...

Caucho Technology Resin 2.1.12 - Directory Listings Disclosure

Caucho Technology Resin 2.1.12 - Directory Listings Disclosure source: https://www.securityfocus.com/bid/9617/info It has been reported that Resin may be prone to an information disclosure vulnerability that may allow an attacker to disclose directory listings by passing malicious data via a URI...

Caucho Technology Resin 2.1.12 - Directory Listings Disclosure

source: https://www.securityfocus.com/bid/9617/info It has been reported that Resin may be prone to an information disclosure vulnerability that may allow an attacker to disclose directory listings by passing malicious data via a URI parameter. The issue has been reported to present itself on...

DoS in GoodTech Telnet Server 4.0.103

Donato Ferrante Application: GoodTech Systems Telnet Server for Windows NT/2000/XP http://www.goodtechsys.com/ Version: 4.0.103 Bug: Denial of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

CVE-2003-1357

ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access...

CVE-2003-1407

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

Microsoft SharePoint Portal and Team Services

There is a bug in how the authentication mode works with the web-based administration page. This page resides, in the Web Servers with Sharepoint, in http://www.example.com/layouts/settings.htm or http://www.example.com/somedirectory/layouts/settings.htm This page is usually protected by NT Basic...