Decrypting passwords for SmartServer 3

Product: Smart Server 3 by NetCPlus Version: 3.75 others? OS: Windows NT/2000/9x Description: SmartServer3 SS3 is a small business email server from NetCPlus. It installs by default in C:Program Filessmartserver3 . In this folder it stores a configuration file called 'dialsrv.ini' . This file is...

CVE-2000-0858

Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability...

Серьезная дырка в Windows NT TSE (RegAPI.DLL Buffer Overflow)

Переполнение буфера при проверки логина пользователя...

Security Bulletin (MS00-087)

Microsoft Security Bulletin MS00-087 - -------------------------------------- Patch Available for "Terminal Server Login Buffer Overflow" Vulnerability Originally posted: November 08, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Window...

Windows NT 4.0 Terminal Server RegAPI.DLL Buffer Overflow

CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft Windows NT 4.0 Terminal Server GINA Date Published: 2000-11-08 Advisory ID: CORE-20001108 Bugtraq ID: 1924 CVE CAN: Non currently assigned. Title: Windows NT 4.0 Terminal Server RegAPI.DLL Buffer Overflow Class: Boundary Error...

Дырки в Network Monitor Windows NT/2000

Переполнение буфера в фильтре разбирающем HTTP...

[COVERT-2000-11] Multiple Network Monitor Overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory November 1, 2000 Multiple Network Monitor Overflows COVERT-2000-11 o Synopsis Multiple buffer overflows in the Windows NT Network Monitor allow a remote attacker to execute arbitrary code or deny...

Security Bulletin (MS00-083)

Microsoft Security Bulletin MS00-083 - -------------------------------------- Patch Available for "Netmon Protocol Parsing" Vulnerability Originally posted: November 01, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr and...

ISSalert: Internet Security Systems Security Advisory: Buffer Overflow in Microsoft Windows NT 4.0 and Windows 2000 Network Monitor

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting

source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...

Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module

S.A.F.E.R. Security Bulletin 001026.EXP.1.8 TITLE : Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module DATE : October 26, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Confirmed on Solaris, Linux and Windows NT PROBLEM: Buffer overflow exists in iPlane...

Registry Permissions reminder - local privilege escalation on Windows NT

Howdy all, The generic security issue of lax permissions on registry keys under Windows NT 4 has been known for sometime see Stephen Sutton's Windows NT Security Guidelines http://www.trustedsystems.com/tssnsaguide.htm but here's a "new" curtly reminder of why it is so important to do so. Local...

Price modification in Element InstantShop

===================================================================== Securax-SA-07 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Price modification in Element InstantShop Announced: 2000-10-23 Updated: 2000-10-23...

Microsoft Windows NT 4.0 - MSIEXEC Registry Permissions

// source: https://www.securityfocus.com/bid/1835/info Due to weak permission settings for the registry key that handles the Microsoft Installer Service MSIEXEC, it is possible for a local user on Windows NT to escalate their privilege level. The file extension associated with the Microsoft...

auction.weaver.txt

File deletion and other bugs in Auction Weaver LITE 1.0 - 1.04 -------------------------------------------------------------- Title: File deletion and other bugs in Auction Weaver LITE 1.0 - 1.04 Author: Steve Christey [email protected] Date Published: October 16, 2000 Product Name: Auction Weaver...

Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow

source: https://www.securityfocus.com/bid/1815/info Hilgraeve HyperTerminal is a communications/telnet application shipped and installed with every copy of Microsoft Windows 98, ME, NT 4.0, and 2000. It is the default telnet client in Microsoft 98 and ME but not in Windows NT 4.0 / 2000. A buffer...

CVE-2000-0663

The CVE-2000-0663 issue concerns Windows NT/2000 where the registry entry for Explorer.exe uses a relative path name, enabling a local user to cause arbitrary commands to run by placing a Trojan named Explorer.exe in the %Systemdrive% directory (the “Relative Shell Path” vulnerability). Affected ...

@stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 )

The signature was botched on the first one. Please use this is possible. -weld -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: All-Mail buffer overrun vulnerability Release Date: 10/12/2000 Application: Nevis Systems All-Mail 1.1 Platform...

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over...

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service

source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to spike to 100% and any existing...