Security Bulletin MS01-043

---------------------------------------------------------------------- Title: NNTP Service in Windows NT 4.0 and Windows 2000 Contains Memory Leak Date: 14 August 2001 Software: Windows NT 4.0, Windows 2000 Impact: Denial of service Bulletin: MS01-043 Microsoft encourages customers to review the...

MS Windows NT Terminal Server 4.0 buffer overflow in regapi.dll allows remote code execution or DoS

Overview Microsoft Windows NT 4.0 Terminal Server contains a buffer overflow that could allow an intruder to execute arbitrary code with the privileges of an administrator. Description There is a buffer overflow in the code that processes the username specifically in RegAPI.DLL in Microsoft Windo...

CVE-2001-1122

Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service crash in lsass.exe by running the NT4ALL exploit program in 'SPECIAL' mode...

Microsoft Windows NT 4.0 - NT4ALL Denial of Service

source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in 'special mode' using 'NT4ALL'. In order to exploit NT4ALL...

Microsoft Windows NT 4.0 - NT4ALL Denial of Service

Microsoft Windows NT 4.0 - NT4ALL Denial of Service source: https://www.securityfocus.com/bid/3144/info It has been reported that it is possible to cause a denial of service on a Windows NT system using the 'NT4ALL' tool. The DoS reportedly occurs after the system reboots while being set in...

CVE-2001-1288

Windows 2000 and Windows NT allows local users to cause a denial of service reboot by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe...

Security Bulletin MS01-041

---------------------------------------------------------------------- Title: Malformed RPC Request Can Cause Service Failure Date: 26 July 2001 Software: Exchange Server 5.5, Exchange Server 2000, SQL Server 7.0, SQL Server 2000, Windows NT 4.0, Windows 2000 Impact: Denial of service Bulletin:...

Security Bulletin MS01-040

---------------------------------------------------------------------- Title: Invalid RDP Data Can Cause Memory Leak in Terminal Services Date: 25 July 2001 Software: Windows 2000 Server and Windows NT 4.0, Terminal Server Edition Impact: Denial of Service Bulletin: MS01-040 Microsoft encourages...

Microsoft Services for UNIX Telnet server is vulnerable to denial of service via memory leak

Overview The telnet server included in the Microsoft Services for Unix package contains a denial-of-service vulnerability that may cause the system to become unstable or crash. Description The telnet server included in the Microsoft Services for Unix SFU package contains a memory leak that can le...

Microsoft Services for UNIX Network File System (NFS) server is vulnerable to denial of service via memory leak

Overview The NFS server included in the Microsoft Services for Unix package contains a denial-of-service vulnerability that may cause the system to become unstable or crash. Description The Network File System NFS server included in the Microsoft Services for Unix SFU package contains a memory le...

CVE-2001-0513

Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port...

iPlanet Directory Server contains multiple vulnerabilities in LDAP handling code

Overview The iPlanet Directory Server contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product,...

HP-UX 11 / Linux Kernel 2.4 / Windows 2000/NT 4.0 / IRIX 6.5 - Small TCP MSS Denial of Service

/ source: https://www.securityfocus.com/bid/2997/info A potential denial of service vulnerability exists in several TCP stack implementations. TCP has a MSS maximum segment size option that is used by a TCP client to announce to a peer the maximum amount of TCP data that can be sent per segment...

[SNS Advisory No.34] TrendMicro InterScan VirusWall 3.51 smtpscan.dll Buffer Overflow

SNS Advisory No.34 TrendMicro InterScan VirusWall 3.51 smtpscan.dll Buffer Overflow Problem first discovered: Wed, 6 Jun 2001 Published: Thu, 28 Jun 2001 ---------------------------------------------------------------------- Overview: --------- A buffer overflow vulnerability was found in some...

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...

1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure

1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/2902/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of...

1C: Arcadia Internet Store 1.0 - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/2902/info 1C: Arcadia Internet Store is a online shopping utility for Microsoft Windows NT/2000 that is fully integratable with 1C: Enterprise, another popular Russian web-commerce utility. One of the components of this package, 'tradecli.dll', allows use...

Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments

Overview Hewlett Packard's HP OpenView and Tivoli NetView are system management software packages. There is a vulnerability a component of these packages, ovactiond, that allows intruders to execute arbitrary commands as user bin. This may subsequently lead to a root compromise. Description HP...

Advisory CA-2001-13

CERT Advisory CA-2001-13 Buffer Overflow In IIS Indexing Service DLL Original release date: June 19, 2001 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Microsoft Windows NT 4.0 with IIS 4.0 or IIS 5.0 enabled Systems...

ISSalert: ISS Advisory: Oracle Redirect Denial of Service

Internet Security Systems Security Advisory June 19, 2001 Oracle Redirect Denial of Service Synopsis: Internet Security Systems ISS X-Force has identified a vulnerability with redirected Oracle connections. This vulnerability allows an unauthenticated user to consume all the memory on an Oracle...