Apache Tomcat 3.0 - Directory Traversal

Apache Tomcat 3.0 - Directory Traversal source: https://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with...

Apache Tomcat 3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with specially chosen characters in requested URL...

ADVISORY SSRT0715 Compaq Management Software Potential Security Vulnerability

The important part of this for this list is the impact and solution available for NT even though it's lengthy and covers all affected platforms. regards -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SOFTWARE SECURITY RESPONSE TEAM Compaq Global Services - Compaq Computer Corporation Send Security...

CVE-1999-0718

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key...

Ikonboard v2.1.7b "show files" vulnerability

Product: Ikonboard - Version: 2.1.7b - OS: Unix, NT - Vendor: Notified, http://www.ikonboard.com -= Summary =- This is another bug in the Ikonboard. Anyone can read any file on the remote system with the privileges of the web server. -= Problem =- File: help.cgi ---L.44--- $inhelpon = $query -...

def-2001-10: Websweeper Infinite HTTP Request DoS

====================================================================== Defcom Labs Advisory def-2001-10 Websweeper Infinite HTTP Request DoS Author: Peter Grьndl [email protected] Release Date: 2001-03-08 ======================================================================...

@stake Advisory Notification: Netscape Directory Server buffer overflow (A030701-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: Netscape Directory Server buffer overflow Release Date: 03/07/2001 Application: Netscape Directory Server 4.1 bundled with Netscape Messaging Server Netscape Directory Server...

Mercur Mailserver 3.3 buffer overflow with EXPN

By default SMTP server is installed to be run from LocalSystem account. This makes it easy to make any action on the target system if an attacker could gain control over the code execution flow of the product. Particulary, MERCUR SMTP-Service binary MCRSMTP.EXE version 3.30.3.0 suffers from buffe...

Denial of Service attack against computers running Microsoft PPTP (NT 4.0)

Diversified Software Industries, Inc. http://www.dsi-inc.net/dsi Security Advisory February 22, 2001 Denial of Service attack against computers running Microsoft PPTP NT 4.0 1. Description 2. Steps to reproduce exploits 3. Vendor status, solution, workarounds 4. Disclaimer 5. Credits 6. About DSI...

Потенциальная дырка в драйверах Windows NT/2000 (DbgPrint format string)

Во многих дрйверах ошибка форматной строки при вызови функции отладки...

NT drivers are potentially vulnerable to format string bug

Many NT drivers are potentially vulnerable to "format string bug". The problem is concerned with DbgPrint function that is used for debug messages. Some drivers instead of directly call of this function use additional intermediate functions. Those functions add a prefix to an outputted string,...

CVE-2001-0045

The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities...

CVE-2001-0046

The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities...

CVE-2001-0047

The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server MTS packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities...

MS01-009: Malformed PPTP Packet Stream Remote DoS (283001)

The hotfix for the 'Malformed PPTP Packet Stream' problem has not been applied. This hotfix corrects a memory leak in Windows NT PPTP implementation that could cause it to use all the resources of the remote host. An attacker could use this flaw by sending malformed PPTP packets to the remote hos...

Microsoft Security Bulletin MS01-009

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Patch...

Microsoft Windows NT PPTP DoS Vulnerability

Description A remote attacker could cause a denial of service condition in Windows NT. Submitting multiple maliciously crafted packets to the PPTP services will cause the consumption of all available system resources. Technologies Affected Microsoft Windows NT 4.0 Microsoft Windows NT Enterprise...

Дырка в Windows NT (NTLMSSP)

Ошибка в службе NTLM Security Support Provider NTLMSSP позволяет полуить локальные права администратора...

Local promotion in NT4's NTLM Security Support Provider

BindView Security Advisory -------- Local promotion vulnerability in NT4's NTLM Security Support Provider Issue Date: February 7, 2001 Contact: [email protected] Topic: Local promotion vulnerability in NT4's NTLM Security Support Provider Overview: Due to a flaw in the NTLM Security Suppo...

Security Bulletin MS01-008

--------------------------------------------------------------------- Title: NTLMSSP Privilege Elevation Vulnerability Date: 07 February 2001 Software: Windows NT 4.0 Impact: Privilege Elevation Bulletin: MS01-008 Microsoft encourages customers to review the Security Bulletin at:...