DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

DST2K0009.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 31/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

MS00-036: NT ResetBrowser frame & HostAnnouncement flood patch (262694)

The hotfix for the 'ResetBrowser Frame' and the 'HostAnnouncement flood' has not been applied. The first of these vulnerabilities allows anyone to shut down the network browser of this host at will. The second vulnerability allows an attacker to add thousands of bogus entries in the master browse...

CISADV000524a.txt

Cerberus Information Security Advisory CISADV000524a http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Rockliffe Mailsite Buffer Overflow Affected Systems : Windows NT running MailSite-HTTPMA/4.2.1.0 Issue : Remote attackers can execute arbitrary code Author : Dav...

Alert: PDG Cart Overflows

Cerberus Information Security Advisory CISADV000525 http://www.cerberus-infosec.co.uk/advisories.html Released : 25th May 2000 Name : PDGSoft Shopping Cart buffer overflows Affected Systems : UNIX/NT Web servers with PDGSoft's Cart. Issue : Remote attackers can execute arbitrary code Description...

DST2K0003 : Buffer Overrun in NAI WebShield SMTP v4.5.44 Managem ent Tool

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 08/05/2000 [email protected]...

Security Bulletin (MS00-036)

Microsoft Security Bulletin MS00-036 - -------------------------------------- Patch Available for "ResetBrowser Frame" and "HostAnnouncement Flooding" Vulnerabilities Originally posted: May 25, 2000 Summary ======= Microsoft has released a patch that eliminates two security vulnerabilities, one...

CVE-2000-0403

The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability...

Alert: Buffer overflow in Rockliffe's MailSite

Cerberus Information Security Advisory CISADV000524a http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Rockliffe Mailsite Buffer Overflow Affected Systems : Windows NT running MailSite-HTTPMA/4.2.1.0 Issue : Remote attackers can execute arbitrary code Author : Dav...

CISADV000524b.txt

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl))

Not much to say. While performing basic input validation checks in Lotus Domino ESMTP service see subject running on the top of Windows NT system this applies probably to other platforms as well, within approximately 30 seconds we found remote buffer overflow leading to system crash and, if...

Security Bulletin (MS00-029)

Microsoft Security Bulletin MS00-029 - -------------------------------------- Patch Available for "IP Fragment Reassembly" Vulnerability Originally Posted: May 19, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 95, Windows 98,...

Emurl2.0.windows

Affected Product: Emurl 2.0 For Windows NT 4.0 possibly others Product information: Emurl is web-based email host developped by SeattleLab. http://www1.seattlelab.com/emurl/ Impact: Users can access the mailbox's content of anybody on the system. They can also steal their POP passwords since Emur...

calendar.pl.vuln

Evening, I wouldnt normally post a small thing like this to bugtraq but i checked out cgi-resources.com and it seems to be damn popular so someone here may care. Oh yeah I notified Matt the vendor and he figured it wasnt really an issue. Oh well. Visit www.suid.kg/advisories/ for more crap like...

nai.00-05-04.trendmicro

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...

CVE-1999-0980

Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...

Profile overwrite/delete due to registry size limit.

All, We have discovered a bug with NT v4.0-SP6a registry size growth and overwriting of user profiles. This bug was exposed when the SMS v2.0-SP2 client runs into a condition where it continually creates new registry keys and values filling the system registry with thousands of crap entries - thu...

Cold Fusion Server 4.5.1 DoS Vulnerability.

Exploit Announcement Title: Cold Fusion Server 4.5.1 Denial-of-Service Attack using CFCACHE. OS: Windows NT 4.0 Affected Product Versions: Cold Fusion Server 4.5.x, Professional & Enterprise. - Acknowledgements Thanks are due to Patrick Keating, for his help diagnosing and discovering this issue...

stream3 flood attack

Topic: Windows NT/2000 DoS via stream3 flood attack Authors: Dark Zorro , Error Date: 2 December 2000 yes... it's old Vendor Informed: 2 December 2000 Software affected: Windows NT 4.0, Windows 2000 Risk: Low Remote: Yes Exploitable: Yes SECURITY.NNOV advisories:...

Microsoft Windows SMB Registry : NT4 Service Pack Version Detection

Nessus was able to determine the Service Pack version of the Windows NT system by reading the following registry key : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10401; scriptversion"1.56";...