1441 matches found
PHP Classifieds 6.0.5 - Cross-Site Scripting
PHP Classifieds 6.0.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5022/info PHP Classifieds has been reported to be prone to cross-site scripting attacks. Attackers may inject arbitrary HTML or script code into URI parameters in a malicious link. When the malicious link is...
Oracle Reports Server Buffer Overflow (#NISR12062002B)
NGSSoftware Insight Security Research Advisory Name: Oracle 9iAS Reports Server Systems: All Severity: High Risk Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Advisory URL:...
ColdFusion MX - Missing Template Cross-Site Scripting
source: https://www.securityfocus.com/bid/5011/info ColdFusion MX is prone to cross site scripting attacks. Attacker-supplied script code may be included in a malicious missing template URI generated by the default Missing Template handler of ColdFusion. The attacker-supplied script code will be...
Security Bulletin MS02-020:SQL Extended Procedure Functions Contain Unchecked Buffers (Q319507)
---------------------------------------------------------------------- Title: SQL Extended Procedure Functions Contain Unchecked Buffers Q319507 Date: 17 April 2002 Software: Microsoft SQL Server Impact: Run Code of Attacker's Choice Max Risk: Moderate Bulletin: MS02-020 Microsoft encourages...
Local Security Vulnerability in Windows NT and Windows 2000
LOCAL SECURITY VULNERABILITY IN WINDOWS NT AND WINDOWS 2000 Radim "EliCZ" Picha [email protected] discovered a vulnerability in Windows NT 4.0 and Windows 2000. He has written an exploit called DebPloit that shows the weakness of a local Windows NT/2000 security and totally compromises entire...
Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow (2)
Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow 2 // source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, ...
Another Web Folder issue
This is an issue that I submitted to Microsoft yesterday morning. I was going to wait to hear from them before submitting this NTBugTraq, but when only several hours later when I saw Georgi Guninski's Customized Folders issue I felt that I had better "stake my claim" to this issue before he or...
Microsoft Windows Server 2000 - Named Pipes Predictability
Microsoft Windows Server 2000 - Named Pipes Predictability source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBoo...
CVE-1999-0488
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability...
Microsoft Internet Explorer 455.55.0.1 - external.NavigateAndFind() Cross-Frame
Microsoft Internet Explorer 455.55.0.1 - external.NavigateAndFind Cross-Frame Microsoft Internet Explorer 4.0 for WfW/Windows 3.1/Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5,Internet Explorer 5.0.1,Internet...
ie5.javascript.redirect.txt
IE 5.0 allows reading local and from any domain files and window spoofing using HTTP redirection to "javascript:" Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is n...
Microsoft Internet Explorer 5.04.0.1 - JavaScript URL Redirection (MS99-043)
Microsoft Internet Explorer 5.04.0.1 - JavaScript URL Redirection MS99-043 Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Microsoft Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 Javascript URL Redirection Vulnerability source:...
CVE-1999-0382
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges...
nt.ras.bof.txt
Date: Wed, 19 May 1999 11:37:00 +0100 From: Mnemonix To: [email protected] Subject: Buffer Overruns in RAS allows execution of arbitary code as system Introduction Microsoft's RAS Service on Windows NT all service packs contains numerous buffer overruns that allow execution of arbritary code...
iis.system.isapi.txt
Date: Mon, 8 Mar 1999 11:27:48 -0500 From: Fabien Royer To: [email protected] Subject: ISAPI Extension vulnerability allows to execute code as SYSTEM There's a vulnerability in IIS and other WEB servers executing as SYSTEM that allows to execute an ISAPI extension in the security...
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Phonebook Buffer Overflow
Microsoft Windows NT 4.04.0 SP14.0 SP24.0 SP34.0 SP44.0 SP5 - RAS Phonebook Buffer Overflow // source: https://www.securityfocus.com/bid/266/info Microsoft Windows NT RAS Service contains multiple buffer overflows that allow the execution of arbitrary code resulting in elevated privileges by loca...