nt.case.symbolic.txt

Date: Fri, 12 Mar 1999 13:03:57 -0700 From: Mark To: [email protected] Subject: ALERT Case Sensitivity and Symbolic Links Prasad Dabak of Cybermedia Software Private Limited has discovered yet another security risk in Windows NT involving the operating system's case sensitivity...

nukenabber-DoS.txt

------------------------------------ NOTE: NukeNabber 2.9 and earlier are vulnerable. nn29a.exe is NOT vulnerable. ------------------------------------ Date: Fri, 6 Nov 1998 01:46:17 -0600 From: [email protected] To: [email protected] Subject: various lame DoS attacks Aleph, None of...

iusr_bug.txt

Internet User Bug Security Hole -kon. I've recently found a bug in NT 4 Server w/ IIS that allows the internet user IUSRCOMPUTER to change any user's password, including the administrators, leading to total server compromise. How it's done: The attacker must have access to the NT Server's web...

webcom.cgi.guestbook.txt

Date: Fri, 9 Apr 1999 20:41:39 +0100 From: Mnemonix To: [email protected] Subject: Webcom's CGI Guestbook for Win32 web servers I reported a while back on Webcom's www.webcom.se CGI Guestbook wguest.exe and rguest.exe having a number of security problems where any text based file o...

zen25-hole.txt

Date: Wed, 29 Jul 1998 18:02:07 +1100 From: Dave Cottle Subject: ALERT: security hole in zen 2.5 client for NT 4.0 This was passed to Novell last week. here are the details: Situation: NT 4.0 Workstation Service Pack 3 ZEN Client 2.5 installed connecting to a NW 4.11 server Security Hole: using t...

ibm.netfinity.rcs.nt.txt

Date: Tue, 25 May 1999 13:05:56 -0400 From: Russ To: [email protected] Subject: Security Leak with IBM Netfinity Remote Control Software On May 10th, 1999, Thomas Krug reported to NTBugtraq; Hi, I found a method to run programs like regedit and user manager with admin right using t...

nt.system.policies.txt

Date: Wed, 3 Feb 1999 22:41:52 -0000 From: mnemonix To: [email protected] Subject: Inherent weaknesses in NT system policies There are certain key vulnerabilities in NT's System Policies that allow most restrictions to be by-passed. For instance, although Registry Editing tools can be disabled...

nt4+sp4.y2k.txt

Date: Tue, 23 Mar 1999 18:31:34 -0500 From: Ilya Slavin To: [email protected] Subject: NT Y2K issue post SP4 Those of you who are in the process of deploying SP4 or are planning to do so should be aware that a new Y2K problem was discovered in this service pack. Here's the scoop. I...

ca.inoculan.nt.txt

Date: Sat, 8 May 1999 14:58:08 +1000 From: Glenn Corbett To: [email protected] Subject: Insecure Bahaviour in Inoculan Client Russ, A problem has been discovered with the InocuLAN client on Windows NT workstations. If an account lockout policy is present on a Windows NT domain, lar...

imail.passwd.txt

Date: Thu, 4 Mar 1999 22:30:42 -0800 From: Steven Alexander To: [email protected] Subject: IMAIL password recovery is trivial. The user passwords for Ipswitch's IMail server are stored in encryptedsorta form in the Windows NT registry...

nt.domain.DoS.txt

Date: Tue, 2 Mar 1999 16:43:10 -0600 From: Paul L Schmehl To: [email protected] Subject: NT Domain DoS and Security Exploit with SAMBA Server Near the end of November of last year, we notified the SAMBA team, NTBUGTRAQ and Microsoft of two problems with SAMBA in an NT domain. The...

ms.sql.enterprise.manager.txt

Date: Thu, 4 Mar 1999 19:52:15 -0500 From: [email protected] To: [email protected] I've come across an issue regarding Microsoft SQL Server 6.0 and 6.5. SQL Server has a management tool called SQL Explorer used to manage the server. If your SQL Server is set to use normal...

nt.pdc.dos.txt

Date: Fri, 4 Jun 1999 14:01:01 -0700 Reply-To: Carl Byington Sender: Windows NT BugTraq Mailing List From: Carl Byington Subject: denial of service attack against NT PDC from Win95 workstation -----BEGIN PGP SIGNED MESSAGE----- I searched the archives, but did not find this one discussed. We have...

conceal.1.3x.txt

Date: Thu, 4 Mar 1999 14:11:47 -0600 From: [email protected] To: [email protected] Subject: S9S ConSeal PC FIREWALL for Windows NT Security Update Just got this from Signal9. [email protected] on 03/04/99 11:41:12 AM To: [email protected] cc: bcc: Bill...

iis.4.0.metabase.passwd.txt

Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...

iishack.asm

; IIS 4.0 remote overflow exploit. ; c dark spyrit -- [email protected] ; ; greets & thanks to: neophyte/sacx/tree/everyone in mulysa and ; beavuh... and all the other kiwi's except ceo. ; ; credits to acp for the console stuff.. ; ; I don't want to go in too deeply on the process of exploiting buff...

msie.5.0.setup.wizard.txt

Tue, 23 Mar 1999 11:41:24 +0200 Thor Kottelin Windows NT BugTraq Mailing List Thor Kottelin MSIE 5 installer disables screen saver After running the MSIE 5 installation wizard ie5setup.exe on two separate NT 4.0 SP4 machines - one Workstation, one Server - my screen saver Logon Screen Saver,...

arcserve.nt.agents.txt

Date: Sun, 21 Feb 1999 21:19:42 -0500 From: Weld Pond To: [email protected] Subject: Severe Security Hole in ARCserve NT agents fwd ---------- Forwarded message ---------- Date: Sun, 21 Feb 1999 17:44:55 -0500 From: ELVIS To: [email protected] Cc: [email protected], CAI , [email protected]...

website.pro.txt

Date: Tue, 16 Feb 1999 17:45:09 -0600 From: Christian Antkow To: [email protected] Subject: Website Pro v2.0 NT Configuration Issues As some of you might be aware, our website www.idsoftware.com was hacked this morning using the "out-of-the-box" features of Website Pro 2.0. The perpetrator use...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...