Trend Micro InterScan VirusWall Remote Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory May 4, 2000 Trend Micro InterScan VirusWall Remote Overflow o Synopsis An implementation flaw in the InterScan VirusWall SMTP gateway allows a remote attacker to execute code with the privileges o...

Ussr Labs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in CASSANDRA NNTPServer v1.10 from ATRIUM SOFTWARE Vulnerability USSR Advisory Code: USSR-2000039 Release Date: May 1, 2000 Systems Affected: CASSANDRA NNTPServer Version v1.10 WinNT / Win95 THE PROBLEM The Ussr Labs Team has recentl...

L-Soft Listserv 1.8 - Web Archives Buffer Overflow

L-Soft Listserv 1.8 - Web Archives Buffer Overflow // source: https://www.securityfocus.com/bid/1167/info The Web Archive component of L-Soft Listserv contains unchecked buffer code exploitable by sending specially crafted requests to the Web Archive. This weakness will allow execution of arbitra...

Cartfix Secret Backdoor Patch tool for cart32

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Tool Release Name: Cartfix Secret Backdoor Patch tool Release Date: April 27, 2000 Application: Cart32 Shopping Cart Program Platform: Win32 Severity: An attacker can execute commands on the web server and modify admin passwor...

CVE-2000-0259

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users...

CVE-2000-0259

The CVE describes a permission misconfiguration in Windows NT 4.0 related to the Cryptography\Offload registry key used by OffloadModExpo. The default permissions allow local users to access cryptographic keys of other users, enabling compromise of confidentiality and integrity of those keys. No ...

CVE-2000-0070

CVE-2000-0070 affects Windows NT 4.0 via the NtImpersonateClientOfPort local procedure call, enabling local privilege escalation. The vulnerability allows a local user to gain complete control (confidentiality, integrity, and availability flags impacted) through impersonation of a port request. T...

CVE-2000-0070

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...

CVE-1999-0824

A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users...

CVE-1999-0824

CVE-1999-0824 involves Windows NT where a user can use SUBST to map a drive letter to a folder. This mapping is not unmapped after log off, potentially allowing the affected user to influence the location of folders accessed by later users. The description covers the mapping behavior and its pers...

razor.dvwssr.txt

BindView RAZOR Team Analysis of DVWSSR.DLL Risks Risks Uncovered: ================ The risks of having dvwssr.dll are not as severe as originally reported in media outlets Friday morning, but still severe enough that system administrators responsible for NT systems to investigate. The risks invol...

CMD.EXE overflow (CISADV000420)

Cerberus Information Security Advisory CISADV000420 http://www.cerberus-infosec.co.uk/advisories.html Released : 20th April 2000 Name : CMD.EXE overflow Affected Systems : Windows NT/2000 Issue : See details Author : David Litchfield [email protected] Description The Cerberus Security Team...

Microsoft Security Bulletin (MS00-027)

Microsoft Security Bulletin MS00-027 - -------------------------------------- Patch Available for "Malformed Environment Variable" Vulnerability Originally Posted: April 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows NTr 4.0...

New DOS on Interscan NT/3.32

One month ago, during a audit, we found a new remote DOS on TrendMicro Interscan for NT last version V3.32, build 1011 and 1022. Last October, USSR Labs found a buffer overflow in HELO command, and wrote a very nice exploit with shell code, giving SYSTEM shell access to remote attacker. Trendmicr...

MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability

Advisory ID Internal CORE-041200 1. Advisory Information Date Published: 2000-04-14 Last Update: 2000-04-14 Advisory ID: CORE-041200 Bugtraq ID: 1109 CVE Name: CVE-2000-0260 Title: MS IIS FrontPage 98 Extensions Buffer Overflow Vulnerability Class: Boundary Error Condition Buffer Overflow Remotel...

DVWSSR.dll Vulnerability in Microsoft IIS 4.0 Web Servers

The following is based on information gleaned from a variety of sources. According to the Wall Street Journal, the discoverer is an unnamed employee of ClientLogic. FYI, my comments to Ted Bridis of WSJ yesterday about the issue were made with very little info only the info he was supplied, so fo...

Security Bulletin (MS00-024)

Microsoft Security Bulletin MS00-024 - -------------------------------------- Tool Available for "OffloadModExpo Registry Permissions" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a tool that installs tighter permissions on a Windows NTr 4.0 registry key...

CVE-2000-0259

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users...

CVE-1999-0701

After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password...

PcAnywhere weak password encryption

PcAnywhere weak password encryption ---- Discussion ---- PcAnywhere 9.0.0 set to its default security value uses a trivial encryption method so user names and password are not sent directly in clear. Since most users have the encryption methods set to either "none" or "PcAnyWhere", their password...