3143 matches found
Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (4)
source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU" and may be exploited through other programs that use the library if an...
MS02-003: WinReg Remote Registry Key Manipulation (316056)
The key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg is writeable by non-administrators. The installation software of Microsoft Exchange sets this key to a world-writeable mode. Local users could use this misconfiguration to escalate their privileges on this host. C Tenable...
Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow (PoC)
Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow PoC source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory...
SECURITY.NNOV: Windows NT 4.0/2000 cmd.exe long path buffer overflow/DoS
Title: Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000 Affected: Microsoft Windows NT 4.0 buffer overflow Microsoft Windows 2000 DoS Vendor: Microsoft Risk: Average for Windows NT 4.0 Low for Windows 2000 Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I. Intro cmd.exe i...
Microsoft Windows NT cmd.exe buffer overflow
Buffer overflow Windows NT or batch failure Windows 2000 on oversized paths...
Microsoft Windows NT/2000 - 'cmd.exe' CD Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory resulting in a path with more than 256 characters, a buffer...
ProxyView default undocumented password
-- Summary -- The Replicom ProxyView remote access unit ships with a default Administrator password for Embedded Windows NT. Any users with access to communicate with the ProxyView over the NetBIOS port TCP/139 can exploit this fact to take over the ProxyView unit. -- Product details -- From...
Group policy DoS in Windows NT/2000
By putting exclusive lock on group policy file it's possible to stop group policy from applying domainwide...
CVE-2002-2401
NT Virtual DOS Machine NTVDM.EXE in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs...
CVE-2002-1833
The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...
CVE-2002-2073
Cross-site scripting XSS vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 ctr parameter in Default.asp and 2 the query string to formslogin.asp...
CVE-2002-2028
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing...
MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)
The remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11145; scriptversion"1.49"; scriptcvsdate"Date: 2018/11/15 20:50:29"...
Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (1)
Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 1 // source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the...
Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service (2)
Microsoft Windows XP2000NT 4.0 - RPC Service Denial of Service 2 // source: https://www.securityfocus.com/bid/6005/info The Microsoft Windows RPC service contains a flaw that may allow a remote attacker to cause a denial of service. By sending a specifically malformed packet to TCP port 135, the...
Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000
Title: Buffer overflow/DoS against cmd.exe for Windows NT 4.0/2000 Author: ZARAZA Affected: Microsoft Windows NT 4.0 buffer overflow Microsoft Windows 2000 DoS Vendor: Microsoft Risk: Average for Windows NT 4.0 Low for Windows 2000 Exploitable: Yes Remote: No Vendor Notified: January, 30 2003 I...
Execution Rights Not Checked Correctly For 16-bit Applications
A 16-bit executable file can be loaded for execution even though the file is flagged with execute permission denied. Platforms: Windows NT, 2000, XP Overview: Windows NT/2000/XP do not check execution rights correctly before allowing 16-bit executables to load. This makes it possible to load and...
Windows NT/2000/XP 16 bit executables protection bypass
16 bit application may be launched from another 16 bit application without have execution right...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...
CVE-2002-0725
NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file...