5444 matches found
CVE-2001-0507
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability...
Security Bulletin MS01-044
---------------------------------------------------------------------- Title: 15 August 2001 Cumulative Patch for IIS Date: 15 August 2001 Software: IIS 4.0 and 5.0 Impact: Five vulnerabilities resulting in either denial of service or privilege elevation Bulletin: MS01-044 Microsoft encourages...
Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below
note to editors: please leave all links intact. Easily and Remotely Pipe a Covert Shell on phpBB version 1.4.0 and below found and written by: [email protected] http://www.modernhacker.com phpBB, is an open source bulletin board created by the phpBB group phpbb.com . Versions 1.4.0 and belo...
Security Bulletin MS01-036
---------------------------------------------------------------------- Title: Function Exposed via LDAP over SSL Could Enable Passwords to be Changed Date: 25 June 2001 Software: Windows 2000 Impact: Privilege Elevation Bulletin: MS01-036 Microsoft encourages customers to review the Security...
Security Bulletin MS01-032
---------------------------------------------------------------------- Title: SQL Query Method Enables Cached Administrator Connection to be Reused Date: 12 June 2001 Software: Microsoft SQL Server 2000 and SQL Server 7.0 Impact: Privilege elevation Bulletin: MS01-032 Microsoft encourages...
Security Bulletin MS01-031
--------------------------------------------------------------------- Title: Predictable Name Pipes Could Enable Privilege Elevation via Telnet Date: 07 June 2001 Software: Windows 2000 Impact: Privilege elevation, denial of service, information disclosure Bulletin: MS01-031 Microsoft encourages...
Проблема с отладочными регистрами в Windows 2000 (debug registers privelege elevation)
Используя отладочные регистры DR0-DR7 можно "убить" привелегированный процесс и перехватить его именованные каналы, получив системные права...
VMware symlink problems
Problem description ---------------------- There is symlink vulnerability in the vmware-mount.pl script which comes with lates VMware. 2. Details ---------- While mounting virtual disk drives using the vmware-mount.pl script, a temporary file named vmware-mount.pl.PID where PID is the current...
Дырка в Windows 2000 (Network DDE Agent privilege elevation)
Network DDE Agent выполняет запросы клинтской программы в контексте локальной системы вместо контекста запрашивающего пользователя...
Security Bulletin MS01-008
--------------------------------------------------------------------- Title: NTLMSSP Privilege Elevation Vulnerability Date: 07 February 2001 Software: Windows NT 4.0 Impact: Privilege Elevation Bulletin: MS01-008 Microsoft encourages customers to review the Security Bulletin at:...
Security Bulletin MS01-007
---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...
Security Bulletin (MS00-094)
-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...
CVE-2000-0515
The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...
Security Bulletin (MS00-070)
The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-070 - -------------------------------------- Patch...
@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)
@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...
CVE-2000-0433
CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...
CVE-2000-0005
HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...
GetadmforSops.txt
Date: Mon, 11 Jan 1999 20:29:40 -0000 From: mnemonix To: [email protected] Subject: Default permissions on Registry key creates a getadmin hole Summary: There is an interesting hole opened up in the winlogon registry key on NT 4 that allows elevation of privileges to both local and...
