Дырка в Windows 2000 (Network DDE Agent privilege elevation)

Network DDE Agent выполняет запросы клинтской программы в контексте локальной системы вместо контекста запрашивающего пользователя...

Security Bulletin MS01-008

--------------------------------------------------------------------- Title: NTLMSSP Privilege Elevation Vulnerability Date: 07 February 2001 Software: Windows NT 4.0 Impact: Privilege Elevation Bulletin: MS01-008 Microsoft encourages customers to review the Security Bulletin at:...

Security Bulletin MS01-007

---------------------------------------------------------------------- Title: Patch Available for "Network DDE Agent Request" Vulnerability Date: 05 February 2001 Software: Windows 2000 Impact: Privilege elevation Bulletin: MS01-007 Microsoft encourages customers to review the Security Bulletin...

Security Bulletin (MS00-094)

-------------------------------------------------------------------- Issue: Buffer Overflow in Phone Book Service Date: 04 December 2000 Affected Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Bulletin ID: MS00-094 Bulletin:...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

Security Bulletin (MS00-070)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-070 - -------------------------------------- Patch...

@stake Advisory: Windows Still Image Privilege Elevation (A090700 -1)

@stake Inc. www.atstake.com Security Advisory Advisory Name: Windows Still Image Privilege Elevation A090700-1 Release Date: 09/07/2000 Application: Still Image Service Platform: Windows 2000 Severity: A local user can elevate privileges to SYSTEM. Author: DilDog [email protected] Vendor Status:...

CVE-2000-0433

CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...

GetadmforSops.txt

Date: Mon, 11 Jan 1999 20:29:40 -0000 From: mnemonix To: [email protected] Subject: Default permissions on Registry key creates a getadmin hole Summary: There is an interesting hole opened up in the winlogon registry key on NT 4 that allows elevation of privileges to both local and...

CVE-2023-36855

...

CVE-2023-36855

CVE-2023-36855 is rejected as unused by its CNA and does not represent an active vulnerability entry.

MS10-059: Vulnerabilities in the Tracing Feature for Services could allow an elevation of privilege

None None...

Security Update for Office 2003 (KB905645)

A security vulnerability exists in the Korean IME for Microsoft Office 2003, Microsoft Office Project 2003, Microsoft Office OneNote 2003, and Microsoft Office Visio 2003 that could allow for elevation of privilege. This update addresses that vulnerability...

Security Update for Exchange Server 2003 Service Pack 1 (KB931832) - Cluster

This update is for any clustered Exchange servers. A security issue has been identified that could affect your Exchange 2003 system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2003 Service Pack 1 servers...

Security Update for Exchange Server 2003 (KB894549)

A security issue has been identified that could affect your Exchange Server 2003 system in the following way: 1. Denial of Service 2. Elevation of Privilege. Microsoft recommends that you install this update on all Microsoft Exchange Server 2003 servers in your organization...

Security Update for Exchange 2000 Server Service Pack 3 (KB894549)

A security issue has been identified that could affect your Exchange 2000 Server system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2000 servers in your organization...

Security Update for Exchange Server 2003 Service Pack 2 (KB916803) - Non-cluster

This update is for non-clustered Exchange servers. A security issue has been identified that could affect your Exchange 2003 system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2003 Service Pack 2 servers...

Security Update for Exchange Server 2003 Service Pack 2 (KB931832) - Non-cluster

This Update is for non-clustered Exchange servers. A security issue has been identified that could affect your Exchange 2003 system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2003 Service Pack 2 servers...

Security Update for Exchange 2000 Server Service Pack 3 (KB931832)

A security issue has been identified that could affect your Exchange 2000 Server system in the following way: 1. Denial of Service 2. Elevation of Privilege. We recommend that you install this update on all Microsoft Exchange 2000 servers in your organization...