Microsoft Indexing Service (Windows 2000/NT 4.0) - '.htw' Cross-Site Scripting

source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser or HTML compliant e-mail client,...

Rover POP3 Server Username Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long user name 10,000 chars This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10206; scriptversion...

libtermcap_exploit.txt

Subject: local libtermcap exploit To: [email protected] Well, I wrote this a little while back. This is a serious bug, so people should be able to test their systems properly. All admins should definitely upgrade to the newest libtermcap. - sk8 of LS / Local exploit for suid root programs...

windows.arp.DoS.txt

Date: Mon, 12 Apr 1999 13:59:54 +0200 From: Joel Jacobson To: [email protected] Subject: ARP problem in Windows9X/NT Hello all bugtraqers! I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to...

TCP/IP IP Fragmentation Remote DoS (bonk)

It was possible to make the remote server crash using the 'bonk' attack. This is due to a design flaw in the remote operating system's TCP/IP implementation. An attacker may use this flaw to shut down this server, thus preventing the network from working properly. C Tenable Network Security, Inc...