CVE-2000-1149

Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability...

defcom.websphere.txt

====================================================================== Defcom Labs Advisory def-2001-02 IBM Websphere 3.52 Kernel Leak DoS Author: Peter Gründl Release Date: 2001-01-08 ====================================================================== ------------------------=Brief...

Frontpage Publishing DoS (Denial of Service)

Sorry for the delay in posting this. Frontpage Publishing DoS Denial of Service Release Date: Dec 22, 2000 Systems Affected: Default Installations of Windows NT4 IIS4 SP6or Default Installations of Windows 2000 IIS5 SP1or Description: Any current NT server running IIS with Frontpage server...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

Bypass MDaemon 3.5.1 "Lock Server" Protection

Ok, This is my second post in the years and I have been reading all your postings so far. You all are doing a great job indeed. I would like to point out a security problem in MDaemon mail server even in ver 3.5.1 the latest. My setup: Windows NT 4.0 server SP 6.0a MDaemon Pro ver 3.5.1 The lates...

CVE-1999-1579

The Cenroll ActiveX control xenroll.dll for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service resource consumption by creating a large number of arbitrary files on the target machine...

DoS через Windows NT Task Scheduler

Connet на 127.0.0.1 TCP/1026 или TCP/1027 с последующим дисконнектом приводит к зависанию службы с 99 загрузкой процессора...

Vulnerability Report For Microsoft Windows NT 4.0 MSTask.exe code error

Vulnerability Report For Microsoft Windows NT 4.0 MSTask.exe code error Class: Unknown error Remotely Exploitable: Yes Locally Exploitable: Yes Risk: Medium Vendor status: Microsoft was notified on 7 December Vulnerability Description: MSTask.exe is an application that ships with the Windows NT 4...

DoS by SMTP AUTH command in IPSwitch IMail server

Dear folks, I found a kind of DoS to handle SMTP AUTH command in IPSwitch IMail server version 6.0.5. IPSwitch ships a product titled IMail, an email server for usage on NT servers serving SMTP, POP3, IMAP4, LDAP etc. It supports SMTP AUTH commands RFC2554 and several authenticate methods to...

Security Bulletin MS00-095

====================================================================== Issue: Wrong permissions on SNMP, RAS, MTS registry keys Date: 06 December 2000 Affected Software: Windows NT 4.0 Impact: Execute code as LocalSystem Bulletin ID: MS00-095 Bulletin:...

Security Advisory(CSA-200011)

CHINANSL Security AdvisoryCSA-200011 Topic: PHP AND APACHE Vulnerability Release Dateёє Dec 6, 2000 Affected system: ============ APACHE WEB SERVER 1.3 ЎЎЎЎ- Microsoft Windows NT 4.0 ЎЎЎЎ- Microsoft Windows 2000 Impact: ====== CHINANSL security team has found a security problem in Apache web serv...

Очередный проблемы с разрешениями в реестре Windows NT

Возможность записи различных ключей реестра позволяют получить привилегии Local System...

Security Bulletin (MS00-094)

-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...

[CORE SDI ADVISORY] MS Windows NT4 and Windows 2000 Phonebook Service overflow

CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft PhoneBook Server overflow Date Published: December 4th, 2000 Advisory ID: CORE-20001204 Bugtraq ID: 2048 CVE CAN: None currently assigned. Title: Microsoft PhoneBook Server buffer overflow Class: Boundary condition error Remotely...

@stake Advisory: IIS 4.0/5.0 Phone Book server buffer overrun (A120400-1)

@stake, Inc. www.atstake.com Security Advisory Advisory Name: IIS 4.0/5.0 Phone Book server buffer overrun Release Date: 12/04/2000 Application: Microsoft's Phone Book Server on IIS 4.0, 5.0 Platform: Windows NT 4.0, Windows 2000 Severity: A buffer overflow conditions exists in pbserver.dll that...

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password source: https://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to...

IBM DB2 - Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password

source: https://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to the database. During the installation of DB2, the administrator is not prompted ...

Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow

Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow source: https://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in...

Security Bulletin (MS00-091)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Resending due to a bad signature on a previous mailer. We are in the process of changin...

SynAttackProtect.txt

[email protected] Bug / Security / Advisory 21,November, 2000 Killing NT 4.0 HOT FIXES or NO / SP6a Remotely using SynAttackProtect Key Corrected version and solution FOUND : /// Vulnerable Systems \\ Windows NT 4.0 SP6a + with or without HOT Fixes + SynAttackProtect set /// RISK FACTOR \...