CVE-2001-0791

Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access...

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/3443/info A buffer overflow condition can be triggered in Oracle 9iAS Web Cache 2.0.0.1.0 by submitting a malicious URL. This overflow can lead to either the process exiting, the process hanging, or the...

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3443/info A buffer overflow condition can be triggered in Oracle 9iAS Web Cache 2.0.0.1.0 by submitting a malicious URL. This overflow can lead to either the process exiting, the process hanging, or the injection of malicious code. This occurs on all four...

CVE-2001-0791

Trend Micro InterScan VirusWall for Windows NT is vulnerable via CGI programs that handle configuration and do not restrict access. Remote attackers could modify configuration by directly invoking these CGI scripts. Root cause is lack of access controls on certain CGI endpoints. Affected product/...

CVE-2001-0543

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0687

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...

Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336)

Check Point response to FireWall-1 GUI Log Viewer Vulnerability An issue exists in VPN-1/FireWall-1 Management Servers running on Windows NT or Windows 2000. A malicious administrator can exploit a buffer overflow condition in the GUI authentication code to potentially impair management station...

CVE-2001-0245

Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...

Пароли в открытом тексте в ARCServe for NT (readable cleartext passwords)

На разделяемом диске находится файл с паролем в открытом виде...

Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc)

Hi I noticed index server sample file is vulnerable which reveals file info and physical path. Vulnerable Microsoft Index Server 2.0 + IIS 4.0 + Windows NT Server 4.0 + Service Pack 6a Details The Index Server Sample file SQLQHit.asp shipped with Microsoft Index Server 2.0 and Option pack 4.0 , i...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

CVE-1999-1254

Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-1999-1049

ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...

CVE-1999-1291

The CVE-1999-1291 entry concerns the TCP/IP stack in Microsoft Windows 95 and Windows NT 4.0 (potentially others). The vulnerability allows an remote attacker to reset a target’s TCP connections by forcing a reset (RST) in a crafted packet flow (e.g., via a PSH ACK or similar), using the resultin...

CVE-1999-1387

The CVE describes a remote denial-of-service in Windows NT 4.0 SP2 caused by malformed SMB inputs/packets (e.g., a Linux smbmount-generated packet) that can crash the system when executed on an older kernel. Affected software: Windows NT 4.0 SP2. Root cause: improper handling of crafted inputs le...

CVE-1999-1463

Windows NT 4.0 before SP3 is affected by CVE-1999-1463 via the TCP/IP stack. The issue arises when a remote attacker sends improperly fragmented IP packets without the first fragment, which are reassembled by the stack into a valid session, allowing bypass of firewall restrictions or causing a de...

CVE-1999-1195

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly...

CVE-1999-1387

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...