Security Bulletin (MS00-040)

Patch Available for "Remote Registry Access Authentication" Vulnerability Originally posted: June 08, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NT 4.0. Under certain conditions, the vulnerability could be used to cause a...

CVE-2000-0377

The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability...

DST2K0011: DoS & BufferOverrun in CMail v2.4.7 WebMail

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (MS00-040) (2)

source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting the machine would be required in...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (1)

// source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting the machine would be required i...

DST2K0012: BufferOverrun in HP Openview Network Node Manager v6.1

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0012: BufferOverrun in HP Openview Network Node Manager v6.1

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 06/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0012.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 06/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0010.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service (1)

Microsoft Windows NT 4.0 - Remote Registry Request Denial of Service 1 // source: https://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially...

DST2K0010: DoS & Path Revealing Vulnerability in Ceilidh v2.60a

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 05/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

CVE-2000-0544

Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length...

NT admin password change algorithms expose user plaintext passwords

eye-catching subject line, huh? well, under specific circumstances, unfortunately, it's true. as it's now early morning, i shall be reasonably brief. conditions required if using NTLMv1 LmCompatibilibyLevel=0: - NT admin runs USRMGR.EXE or SRVMGR.EXE and either adds a new user, workstation or...

CVE-2000-0328

CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

CVE-1999-0225

Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size...

CVE-1999-0225

CVE-1999-0225 affects Windows NT 4.0. The vulnerability arises in the SMB logon handling where the actual data size does not match the size specified, enabling remote DoS. Connected documents corroborate the same description without adding new technical specifics, affected component is SMB logon ...

DST2K0003.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 08/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0007.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0008.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 30/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...