nt-tcpip-dos.txt

Date: Fri, 25 Sep 1998 18:19:50 +0200 From: Gigi Mori Subject: Crashing NT with Native Calls Hi, Playing with TCPIP.SYS I've noticed that any user could crash the local system with a IRQLNOTLESSOREQUAL exception just calling the undocumented function NtDeviceIoControlFile with an handle to TCPIP...

ciac-J-042.web.security.txt

Date: Tue, 18 May 1999 09:09:34 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-042: Web Security For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\ / \ | / \ \ INFORMATION...

website.pro.txt

Date: Tue, 16 Feb 1999 17:45:09 -0600 From: Christian Antkow To: [email protected] Subject: Website Pro v2.0 NT Configuration Issues As some of you might be aware, our website www.idsoftware.com was hacked this morning using the "out-of-the-box" features of Website Pro 2.0. The perpetrator use...

arcserve.nt.agents.txt

Date: Sun, 21 Feb 1999 21:19:42 -0500 From: Weld Pond To: [email protected] Subject: Severe Security Hole in ARCserve NT agents fwd ---------- Forwarded message ---------- Date: Sun, 21 Feb 1999 17:44:55 -0500 From: ELVIS To: [email protected] Cc: [email protected], CAI , [email protected]...

imail.passwd.txt

Date: Thu, 4 Mar 1999 22:30:42 -0800 From: Steven Alexander To: [email protected] Subject: IMAIL password recovery is trivial. The user passwords for Ipswitch's IMail server are stored in encryptedsorta form in the Windows NT registry...

nt.messagebox.DoS.txt

Date: Sun, 11 Apr 1999 22:50:25 +0200 Reply-To: chefren Sender: Windows NT BugTraq Mailing List From: chefren Subject: Death by MessageBox In-Reply-To: .. -------- Original Message -------- "NT hangs when several threads are calling MessageBox" Date: Fri, 9 Apr 1999 13:23:45 -0400 From: "Sumner,...

ftp.serv-u.2.5.bof.txt

Date: Mon, 3 May 1999 06:16:38 +0200 From: Arne Vidstrom To: [email protected] Subject: Buffer overflows in FTP Serv-U 2.5 Hi, It looks like there are some buffer overflows in FTP Serv-U 2.5 the most recent version and I guess they are present in the versions before too, but I...

nt4.trojaned.profiles.txt

Date: Wed, 28 Apr 1999 20:36:58 +0100 From: Mnemonix To: [email protected] Subject: NT Security Advisory: Domain user to Domain Admin - Profiles and the Registry Problem : NT users can cause other users of the system to load a "trojaned" profile that could lead to a system...

ibm.netfinity.rcs.nt.txt

Date: Tue, 25 May 1999 13:05:56 -0400 From: Russ To: [email protected] Subject: Security Leak with IBM Netfinity Remote Control Software On May 10th, 1999, Thomas Krug reported to NTBugtraq; Hi, I found a method to run programs like regedit and user manager with admin right using t...

slmail-smash.txt

Date: Wed, 8 Jul 1998 17:32:02 PDT From: Ezekial Morrow Subject: SLMail 3.0.2421 Stack Overflow... Product: SLMail 3.0.2421 from Seattle Lab. Vulnerability: Stack overflow - Remote execution of code. Jeremy Kothe [email protected] If the "mail from" field exceeds 256 bytes, it will pass throug...

nt.domain.DoS.txt

Date: Tue, 2 Mar 1999 16:43:10 -0600 From: Paul L Schmehl To: [email protected] Subject: NT Domain DoS and Security Exploit with SAMBA Server Near the end of November of last year, we notified the SAMBA team, NTBUGTRAQ and Microsoft of two problems with SAMBA in an NT domain. The...

csmproxy.txt

Date: Thu, 16 Jul 1998 15:22:24 -0400 From: Security Research Team Subject: S.A.F.E.R. Security Bulletin 980708.DOS.1.1 S.A.F.E.R. Security Bulletin 980708.DOS.1.1 TITLE : Vulnerability with CSM Proxy 4.1 DATE : July 8, 1998 NATURE : Denial-of-Service PLATFORMS : Windows NT, Windows 95/98 DETAILS...

nt4.index.server.2.0.txt

Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...

microsoft.wildcard.matches.txt

Date: Mon, 14 Jun 1999 09:46:41 +0200 From: BROWN Nick Subject: Unwanted wildcard match I don't normally like to present individual bugs as RISKs, but this one just bit me and is so counter-intuitive that I felt I had to report it. It appears that when Windows NT and, I imagine, other...

nt.explorer.DoS.txt

Date: Thu, 11 Feb 1999 11:25:01 -0800 From: Clifford Hammerschmidt To: [email protected] Subject: NT too? Re: Another Windows98 Bug... The following perl script will create a 250 character file that will crash WinNT service pack 3 explorer when right-clicked on: -------------------- $fn = 'A' ...

pcm-dos-execute.txt

TITLE - Buffer Overflow in Platinum PCM 7.0 NATURE - Denial-of-Service, Remote Code Execution PLATFORMS - Windows NT 4.0 DETAILS: Policy Compliance Manager is a product that performs checks on the system, in order to ensure that security policies are enforced. It acts very much as a security...

nai.virusscan.nt.txt

Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 05May1999 Platform : Microsoft NT 4.0 Application : Network Associates' VirusScan NT Severity : Medium Synopsis -------- Network Associates VirusScan NT formerly McAfee VirusScan NT version 4.0.2 does not...

nt.token.ring.DoS.txt

Date: Fri, 2 Oct 1998 01:04:20 -0500 From: Simple Nomad To: [email protected] Subject: NMRC Advisory - Lame NT Token Ring DoS Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org Simple Nomad [email protected] 30Sep1998 Platform : Windows NT Application : TCP/IP Severity :...

ntbufferoverruns.txt

Exploiting Windows NT 4 Buffer Overruns A Case Study: RASMAN.EXE Introduction This document is for educational purposes only and explains what a buffer overrun is and shows how they can be exploited on the Windows NT 4 operating system using RASMAN.EXE as a case study. We will take a look at...

conceal.1.3x.txt

Date: Thu, 4 Mar 1999 14:11:47 -0600 From: [email protected] To: [email protected] Subject: S9S ConSeal PC FIREWALL for Windows NT Security Update Just got this from Signal9. [email protected] on 03/04/99 11:41:12 AM To: [email protected] cc: bcc: Bill...