205 matches found
Security Bulletin MS01-045
---------------------------------------------------------------------- Title: ISA Server H.323 Gatekeeper Service Contains Memory Leak Date: 16 August 2001 Software: ISA Server 2000 Impact: Denial of service, cross-site scripting Bulletin: MS01-045 Microsoft encourages customers to review the...
Microsoft Windows Server 2000 - Telnet Username Denial of Service
Microsoft Windows Server 2000 - Telnet Username Denial of Service source: https://www.securityfocus.com/bid/2838/info Due to a flaw in the implementation of the telnet service, it is possible for a remote client to perform a denial of service attack against a host. If approximately 4300 character...
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (2)
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 2 / IIS 5 remote .printer overflow. "jill.c" don't ask. by: dark spyrit respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to contr...
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (1)
Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 1 / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position...
Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (1)
/ iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back to the beginning of the buffer. an...
Security Bulletin MS01-021
---------------------------------------------------------------------- Title: Invalid Web Request Can Cause Access Violation in ISA Server Web Proxy Service Date: 16 April 2001 Software: ISA Server 2000 Impact: Denial of service Bulletin: MS01-021 Microsoft encourages customers to review the...
CVE-2000-1088
CVE-2000-1088 affects Microsoft SQL Server 2000 and MSDE via the Extended Stored Procedures API. The vulnerability lies in xp_SetSQLSecurity not properly restricting the buffer length before calling srv_paraminfo, enabling a attacker to cause a denial of service or execute arbitrary commands. The...
CVE-2000-1086
The CVE-2000-1086 entry affects Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE). The vulnerability lies in the xp_printstatements function, which fails to properly restrict the length of a buffer before calling srv_paraminfo in the SQL Server API for Extended Stored Procedures (XP)...
CVE-2000-1087
The CVE-2000-1087 vulnerability affects Microsoft SQL Server 2000 and MSDE, where the xp_proxiedmetadata function fails to properly restrict buffer length before invoking srv_paraminfo in the Extended Stored Procedures API. This can allow a local attacker to cause a denial of service or execute a...
CVE-2000-1085
The vulnerability CVE-2000-1085 affects Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE). It concerns the xp_peekqueue function, where the length of a buffer is not properly restricted before invoking srv_paraminfo in the SQL Server API for Extended Stored Procedures (XP). This coul...
Microsoft Windows Server 2000 - Named Pipes Predictability
Microsoft Windows Server 2000 - Named Pipes Predictability source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBoo...
Microsoft Windows Server 2000 - Telnet Server Denial of Service
Microsoft Windows Server 2000 - Telnet Server Denial of Service source: https://www.securityfocus.com/bid/1414/info Microsoft Windows 2000 Server comes with a telnet server to provide remote console access. A remote attacker can send a stream of binary zeros to the server, causing it to fail. If...
Microsoft Windows Server 2000 - Remote CPU-overload
Microsoft Windows Server 2000 - Remote CPU-overload source: https://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP...
Critical Update for SQL Server 2000 Desktop Engine (Windows) on Windows Server 2003 (KB829358)
Critical Update for SQL Server 2000 Desktop Engine Windows on Windows Server 2003 KB829358...
Update for SQL Server 2000 Desktop Engine (SharePoint) on Windows Server 2003 (KB909544)
Update for SQL Server 2000 Desktop Engine SharePoint on Windows Server 2003 KB909544...
Security Update for SQL Server 2000 Service Pack 4 Failover Clustering (KB983809)
A security issue has been identified in the SQL Server 2000 Service Pack 4 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...
Security Update for SQL Server 2000 Service Pack 4 (KB983808)
A security issue has been identified in the SQL Server 2000 Service Pack 4 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...
Security Update for SQL Server 2000 Service Pack 4 (KB983809)
A security issue has been identified in the SQL Server 2000 Service Pack 4 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your comput...
Security Update for Windows Server 2003 (KB883935)
A security issue has been identified that could allow an attacker to compromise your Windows, Exchange 2000 Server, or Exchange Server 2003-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...