Security Bulletin MS01-032

---------------------------------------------------------------------- Title: SQL Query Method Enables Cached Administrator Connection to be Reused Date: 12 June 2001 Software: Microsoft SQL Server 2000 and SQL Server 7.0 Impact: Privilege elevation Bulletin: MS01-032 Microsoft encourages...

Security Bulletin MS01-031

--------------------------------------------------------------------- Title: Predictable Name Pipes Could Enable Privilege Elevation via Telnet Date: 07 June 2001 Software: Windows 2000 Impact: Privilege elevation, denial of service, information disclosure Bulletin: MS01-031 Microsoft encourages...

Проблема с отладочными регистрами в Windows 2000 (debug registers privelege elevation)

Используя отладочные регистры DR0-DR7 можно "убить" привелегированный процесс и перехватить его именованные каналы, получив системные права...

VMware symlink problems

Problem description ---------------------- There is symlink vulnerability in the vmware-mount.pl script which comes with lates VMware. 2. Details ---------- While mounting virtual disk drives using the vmware-mount.pl script, a temporary file named vmware-mount.pl.PID where PID is the current...

Дырка в Windows 2000 (Network DDE Agent privilege elevation)

Network DDE Agent выполняет запросы клинтской программы в контексте локальной системы вместо контекста запрашивающего пользователя...

Security Bulletin MS01-008

--------------------------------------------------------------------- Title: NTLMSSP Privilege Elevation Vulnerability Date: 07 February 2001 Software: Windows NT 4.0 Impact: Privilege Elevation Bulletin: MS01-008 Microsoft encourages customers to review the Security Bulletin at:...

Security Bulletin MS01-007

---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...

Security Bulletin (MS00-094)

-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

Security Bulletin (MS00-070)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-070 - -------------------------------------- Patch...

@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)

@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...

CVE-2000-0433

CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...

GetadmforSops.txt

Date: Mon, 11 Jan 1999 20:29:40 -0000 From: mnemonix To: [email protected] Subject: Default permissions on Registry key creates a getadmin hole Summary: There is an interesting hole opened up in the winlogon registry key on NT 4 that allows elevation of privileges to both local and...

Security Update For Exchange Server 2013 SP1 (KB4092041)

This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server if an attacker sends an email message that has a specially crafted attachment to a vulnerable server that is...

Security Update for Microsoft Office SharePoint Server 2007 (KB956716), 64-bit Edition

A security vulnerability exists in Microsoft Office SharePoint Server 2007 that could allow elevation of privileges. This update resolves that vulnerability...

Security Update for Microsoft Office SharePoint Server 2007 (KB979445), 32-bit Edition

A security vulnerability exists in Microsoft Office SharePoint Server 2007 that could allow elevation of privileges. This update resolves that vulnerability...

Security Update for Microsoft Virtual Server 2005 R2 Service Pack 1 (KB969856)

A security issue has been identified that could allow elevation of privilege on virtual machines. You can help protect your computer by installing this update from Microsoft. After you install this item, you need to restart your computer...

Security Update for Microsoft Virtual PC 2004 and Microsoft Virtual 2004, Service Pack 1 (KB937986)

A security issue has been identified that could allow elevation of privilege on virtual machines running Virtual PC 2004 or Virtual PC 2004 Service Pack1. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your compute...

Security Update for Exchange 2000 Server Service Pack 3 (KB894549)

A security issue has been identified that could affect your Exchange 2000 Server system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2000 servers in your organization...