189 matches found
EUVD-1999-0549
The registry in Windows NT can be accessed remotely by users who are not administrators...
Microsoft Internet Explorer 45 - ActiveX Eyedog Remote Overflow
Microsoft Internet Explorer 45 - ActiveX Eyedog Remote Overflow Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX "Eyedog" Vulnerability source: https://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for...
Microsoft Internet Explorer 4/5 - ActiveX 'Eyedog' Remote Overflow
Microsoft Internet Explorer 4.0/5.0 for Windows 95/Windows NT 4/Windows 2000/Windows 95/Windows 98 ActiveX "Eyedog" Vulnerability source: https://www.securityfocus.com/bid/619/info The Eyedog ActiveX control is marked 'safe for scripting' although it permits registry access and other information...
triactive.passwd.txt
Date: Fri, 19 Feb 1999 17:35:45 -0500 From: Trevor Gryffyn To: [email protected] Subject: Plaintext Password in Tractive's Remote Manager Software A pretty minor thing, but thought I'd bring it up anyway. I hope it hasn't already been reported. Software: Triactive's Remote Management Software...
nt4.index.server.2.0.txt
Date: Tue, 23 Mar 1999 23:40:55 -0000 From: Mnemonix To: [email protected] Subject: Index Server 2.0 and the Registry When Microsoft's Index Server 2.0 is installed on NT 4 with Internet Information Server 4 it opens a new "AllowedPath" into the Windows NT Registry. Administrators...
msie.5.0.hta.txt
Date: Tue, 8 Jun 1999 08:41:54 -0400 From: "Noller, Jesse" To: [email protected] Subject: IE 5.0 and HTAs Security hole Good day: I recently set up an NT box, with just the basic setup, no other modifications, other than SP5, and an installation of Internet Explorer 5.0. I was...
Qbik WinGate 3.0 - Registry
Qbik WinGate 3.0 - Registry // source: https://www.securityfocus.com/bid/511/info WinGate stores encrypted passwords in the registry, in a subkey where Everyone has Read access by default. The encryption scheme is weak, and therefore anyone can get and decrypt them. include "stdafx.h" include...
CVE-1999-1556
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value...