Microsoft NetMeeting 2.1/3.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one of the URI parameters of the CALL...

Microsoft Windows SMB Registry : Classic Logon Screen

The registry key HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\LogonType is set to 1. It means that users who attempt to log in locally will see get the 'new' WindowsXP logon screen which displays the list of users of the remote host. C Tenable Network Security, Inc...

DEBIAN-CVE-2003-0021

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

CVE-2003-0022

The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

Terminal Emulator Security Issues

TERMINAL EMULATOR SECURITY ISSUES Copyright © 2003 Digital Defense Incorporated All Rights Reserved Table of Contents -- Summary -- Disclaimer -- Escape Sequences -- Remote Exploitation -- Screen Dumping -- Window Title Reporting -- Miscellaneous Issues -- Terminal Defense -- Tested Emulator...

Microsoft Windows XP2000 - Fontview Denial of Service

Microsoft Windows XP2000 - Fontview Denial of Service source: https://www.securityfocus.com/bid/6536/info Microsoft Windows is vulnerable to a denial of service condition when attempting to view certain OpenType fonts .otf. When a malformed font file is viewed with the default Windows font viewer...

CVE-2002-1749

Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges...

CVE-2002-1975

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...

CVE-2002-1722

Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button...

PT-2002-2696 · Sharp · Sharp Zaurus Pda

Name of the Vulnerable Software and Affected Versions: Sharp Zaurus PDA versions SL-5000D and SL-5500 Description: The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to gues...

CVE-2002-1602

Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVEBRAILLE is defined, allows local users to execute arbitrary code...

GNU Screen 3.9.x Braille Module - Local Buffer Overflow

GNU Screen 3.9.x Braille Module - Local Buffer Overflow // source: https://www.securityfocus.com/bid/4578/info Screen is a freely available, open source terminal management software package. It is distributed and maintained by the Free Software Foundation. It is available for the Unix and Linux...

GNU Screen 3.9.x Braille Module - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/4578/info Screen is a freely available, open source terminal management software package. It is distributed and maintained by the Free Software Foundation. It is available for the Unix and Linux platforms. Under some circumstances, it may be possible f...

Vulnerability in Black ICE Defender

The current version of BlackICE Defender 2.9.caq and 2.9.cap running on a Windows 2000 machine can be remotely crashed using a very basic ping flood. This has been tested with Divine Intervention 2 & 3, Sisoft Sandra Network LAN benchmark. Setting the packet size to about 10,000 bytes causes a Bl...

CVE-2001-1012

CVE-2001-1012 affects the screen utility prior to version 3.9.10. The issue is described as a multi-attach error that allows local users to gain root privileges when there is a subdirectory under /tmp/screens/. The connected sources confirm the affected component and the local-privilege escalatio...

CVE-2001-1012

Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/...

Несанкицонированный доступ через SGI O2 (unauthorized access)

Можно подключиться к удаленному компьютеру и получать содержимое экрана...

CVE-2001-1200

Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys...

CVE-1999-1025

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-1999-1370

The CVE-1999-1370 entry concerns the Internet Explorer 5.0 setup wizard (ie5setup.exe). The provided sources state that during unattended installation it disables the screen saver and the Task Scheduler Service, potentially allowing local access or disruption of security-critical program executio...