nt4-ole-clipboard-password.txt

Date: Fri, 29 Jan 1999 10:21:51 -0600 From: "Reed, David" To: [email protected] Subject: ole objects in a "secured" environment? fellow 'noids, background: since all of the major security flaws in windows nt 4.0 have been discovered who am i kidding? ;-, i'd like to point out a min...

nt4.trojaned.profiles.txt

Date: Wed, 28 Apr 1999 20:36:58 +0100 From: Mnemonix To: [email protected] Subject: NT Security Advisory: Domain user to Domain Admin - Profiles and the Registry Problem : NT users can cause other users of the system to load a "trojaned" profile that could lead to a system...

quakenbush-nt-password.txt

L0pht Security Advisory Advisory released Jan. 21, 1999 Application: Quakenbush Windows NT Password Appraiser Severity: Users of the tool Password Appraiser are unwittingly publishing NT user passwords to the internet even if your company is behind a firewall. Author: [email protected]...

ntsp4.bsod.txt

Date: Wed, 21 Oct 1998 09:08:40 +0300 From: fill To: [email protected] Subject: New NT Bug Hi! This small program reloads NT but not win95. Tested with SP4 RC also. Enjoy! include int WINAPI WinMainHINSTANCE hinstExe, HINSTANCE hinstPrev, LPSTR lpszCmdLine, int nCmdShow HMENU hMenu...

windows.prn.flaw.txt

Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...

ciac-J-042.web.security.txt

Date: Tue, 18 May 1999 09:09:34 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-042: Web Security For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ | / \ \ INFORMATION...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

ms.winhlp32.exe.bof.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...

ftp.serv-u.2.5.bof.txt

Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...

pc.anywhere.dos.txt

Date: Fri, 28 May 1999 12:02:15 -0700 From: Chris Radigan To: [email protected] Subject: DoS against PC Anywhere Hello all, This is my first post to the group so I'll try to keep it as brief as possible. Searching through the bugtraq archives, I came across articles 001732, 001734,...

nt.messagebox.DoS.txt

Date: Sun, 11 Apr 1999 22:50:25 +0200 Reply-To: chefren Sender: Windows NT BugTraq Mailing List From: chefren Subject: Death by MessageBox In-Reply-To: .. -------- Original Message -------- "NT hangs when several threads are calling MessageBox" Date: Fri, 9 Apr 1999 13:23:45 -0400 From: "Sumner,...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...

ntbufferoverruns.txt

Exploiting Windows NT 4 Buffer Overruns A Case Study: RASMAN.EXE Introduction This document is for educational purposes only and explains what a buffer overrun is and shows how they can be exploited on the Windows NT 4 operating system using RASMAN.EXE as a case study. We will take a look at...

nt-tcpip-dos.txt

Date: Fri, 25 Sep 1998 18:19:50 +0200 From: Gigi Mori Subject: Crashing NT with Native Calls Hi, Playing with TCPIP.SYS I've noticed that any user could crash the local system with a IRQLNOTLESSOREQUAL exception just calling the undocumented function NtDeviceIoControlFile with an handle to TCPIP...

nt+exceed.DoS.txt

Date: Tue, 27 Apr 1999 13:29:26 -0700 From: "LaFournaise, Chris J." To: [email protected] Subject: NT/Exceed D.O.S. This is regarding Hummingbird's Exceed X emulator v5 and possibly v6 running on Windows NT. I haven't tested Win95/98. The Exceed X server allows inbound TCP connections on port...

nt.screensaver.token.txt

Date: Tue, 9 Mar 1999 12:57:42 -0800 From: Aleph One To: [email protected] Subject: Windows NT Screen Saver Vulnerability Cybermedia Software has found the following vulnerability: Screen Saver vulnerability Description: The Screen Saver is started by Winlogon.Exe whenever the machine is idle...

retina.vs.iis4-round2.txt

http://www.eeye.com/database/advisories/ad06081999/ad06081999.html Retina vs. IIS4, Round 2 Systems Affected: Internet Information Server 4.0 IIS4 Microsoft Windows NT 4.0 SP3 Option Pack 4 Microsoft Windows NT 4.0 SP4 Option Pack 4 Microsoft Windows NT 4.0 SP5 Option Pack 4 Release Date: June 8,...

nmrctoken.txt

Date: Fri, 2 Oct 1998 01:04:20 -0500 From: Simple Nomad Subject: NMRC Advisory - Lame NT Token Ring DoS Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 30Sep1998 Platform : Windows NT Application : TCP/IP Severity : Medium Synopsis -------- On Token Ring...

websuite.txt

Advisory: Buffer overflow in SmartDesk WebSuite v2.1 Platforms Affected: Windows NT, Windows 98 Found by: cmart [email protected] Date: 5/23/99 Description: ----------- WebSuite v2.1 will crash when an additional 250+ characters is appended after the sites URL on NT Server 4 and NT Workstatio...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...