331 matches found
CVE-2006-1315
The Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information...
CVE-2006-1314
Heap-based buffer overflow in the Server Service SRV.SYS driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size...
CVE-2006-1314
CVE-2006-1314 is a heap-based buffer overflow in the Windows Server Service (SRV.SYS) that affects Windows 2000 SP4, XP SP1/SP2, and Server 2003 (up to SP1). The vulnerability allows remote code execution via crafted first-class Mailslot messages, triggering memory corruption and bypassing size r...
Microsoft Security Bulletin MS06-035 Vulnerability in Server Service Could Allow Remote Code Execution (917159)
Microsoft Security Bulletin MS06-035 Vulnerability in Server Service Could Allow Remote Code Execution 917159 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...
Microsoft Server Service Mailslot vulnerable to heap overflow
Overview A buffer overflow vulnerability in the Microsoft mailslot server service may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mailslot A mailslot is a temporary mechanism that can facilitate data transfer between hosts. Mailslots messages are limited ...
MS06-035: Vulnerability in Server Service Could Allow Remote Code Execution (917159)
The remote host is vulnerable to heap overflow in the 'Server' service that could allow an attacker to execute arbitrary code on the remote host with the 'System' privileges. In addition to this, the remote host is also vulnerable to an information disclosure attack in SMB that could allow an...
Default configuration
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial o...
CVE-2006-0592: Undefined Security Weakness
Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service LexPPS, possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period h...
CVE-2004-2558: Undefined Security Weakness
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provide...
CVE-2005-0051
The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...
Microsoft Windows XP named pipe fails to restrict anonymous access
Overview The Server service running on Microsoft Windows XP leaks authentication information. Description The Server service srvsvc.dll is a component of the Server Message Block SMB, and its follow-on, Common Internet File System CIFS. These are network protocols that Windows uses to share files...
CVE-2005-0051
CVE-2005-0051 concerns the Windows Server service (srvsvc.dll) on Windows XP SP1/SP2, where an anonymous logon over a named pipe can disclose authentication-related information about users accessing shared resources. The vulnerability enables remote information disclosure without code execution. ...
CVE-2005-0051
The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...
CVE-2004-0900: Undefined Security Weakness
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."...
Symantec Enterprise Firewall 7.0/8.0 - DNSD DNS Cache Poisoning
source: https://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the requested records. An attacker could exploit this vulnerability to...
Microsoft SQL 2000/7.0 - Agent Jobs Privilege Escalation
source: https://www.securityfocus.com/bid/5483/info Microsoft SQL Server 2000 uses an Agent which is responsible for restarting the SQL Server service, replication, and running scheduled jobs. Some of the jobs that the Agent executes have weak permissions, which could allow a user with low...
Microsoft SQL Server 2000 - Database Consistency Checkers Buffer Overflow
Microsoft SQL Server 2000 - Database Consistency Checkers Buffer Overflow source: https://www.securityfocus.com/bid/5307/info Microsoft SQL Server 2000 includes utilities called Database Consistency Checkers DBCC. Several of these programs contain identical buffer overflows that, when exploited,...
[DeepZone Advisory] Statistics Server 5.02x stack overflow (Win2k remote exploit)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Statistics Server 5.02x overflow Advisory Name: Statistics Server Live Stats Advisory Released: 00/08/10 Application: Web site traffic analyzer Severity: local/remote user can run arbitrary code with WebServer privileges Status: vendor contacted...
October, 2016 Security and Quality Rollup for .NET Framework 3.0, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 (KB3188744)
October, 2016 Security and Quality Rollup for .NET Framework 3.0, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 KB3188744...