RPC DoS против MS Exchange/SQL/Windows NT/2000

Некорректный RPCзапрос приводит к краху сервисов...

Security Bulletin MS01-048

---------------------------------------------------------------------- Title: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail Date: 10 September 2001 Software: Microsoftr Windows NTr 4.0 Impact: Denial of service Bulletin: MS01-048 Microsoft encourages customers to review...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0509

CVE-2001-0509 affects RPC servers in Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000. The vulnerability allows remote attackers to cause a denial of service via malformed inputs. No exploitation details or specific fixes are prov...

Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons

BindView Security Advisory -------- Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons Issue Date: July 30, 2001 Contact: [email protected] Topic: Many Microsoft DCE/RPC servers are vulnerable to remote DoS attacks Overview: Many DCE/RPC servers don't do proper parameter...

Security Bulletin MS01-041

---------------------------------------------------------------------- Title: Malformed RPC Request Can Cause Service Failure Date: 26 July 2001 Software: Exchange Server 5.5, Exchange Server 2000, SQL Server 7.0, SQL Server 2000, Windows NT 4.0, Windows 2000 Impact: Denial of service Bulletin:...

Ошибки в tcpdump (remote root)

Ошибки в утилите tcpdump FreeBSD 4.x при использовании обработчика пакетов AFS RPC позволяют получить удаленный root в результате срыва стека...

SSH1 may generate weak passphrase when using Secure RPC

Overview The secure-RPC feature of the SSH1 client in Solaris sometimes encrypts the SSH private key file with a weak passphrase, which can be determined by an attacker and used to recover the SSH private keys. Other versions of the SSH client running on non-Solaris platforms are not affected by...

Solaris rpc.yppasswdd username Remote Overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10684; scriptversion"1.37"; scriptcvsdate"Date: 2018/11/15 20:50:22";...

CVE-2001-0259

The connected sources confirm a vulnerability in SSH Communications Security SSH versions 1.2.27–1.2.30 when Secure-RPC is enabled. A local attacker can cause the system to recover the SUN-DES-1 magic phrase generated for another user, which can then decrypt that user’s private key file. This wea...

Bug in SSH1 secure-RPC support can expose users' private keys

Hello all, There is a bug in SSH-1.2.30 involving Secure RPC. The patch for this is available at http://www.ssh.com/patches.html. The explanation and bug was submitted by Richard Silverman [email protected], and his explanation of the bug is below. The SSH1 protocol is not formally supported by SSH...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0771

CVE-2000-0771 refers to a Windows 2000 vulnerability where a local user can corrupt the local security policy by processing malformed RPC traffic, described as the “Local Security Policy Corruption.” The issue is a local-privilege-consistency disruption with a documented impact of partial availab...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

statd bounce vulnerability

Overview statd allows access to RPC services it shouldn't. Description Background rpc.statd and rpc.lockd are designed to work in conjunction with each other to manage NFS lock information in the event of a crash of an NFS client or server. The rpc service rpc.statd is a program designed to...

Security Bulletin (MS00-066)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-066 ====================================== Patch...

DoS Windows 2000 через RPC

Некорректный RPC-пакет приводит к отказу сервера...

MS00-066: Malformed RPC Packet patch (272303)

The hotfix for the 'Malformed RPC Packet' problem has not been applied. This vulnerability allows a malicious user to launch a denial of service against this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10509; scriptversion"1.46"; scriptcvsdate"Date: 2018/11/...

Дырка в Windows 2000 COM Internet Services Proxy

Определенные виды RPC-запросов упакованных в HTTP приводят к краху сервиса...

Microsoft refuses to fix a security bug in Windows 2000

Microsoft refuses to fix a security bug in Windows 2000 Eugene Kalinin Medical Informatics Laboratory Moscow, Russia Aug 16, 2000 Yesterday Microsoft refused to fix a security problem in Windows 2000 RPC service. The bug in RPC service allows an attacker to put a Windows 2000 server out of servic...