Windows Server 2003 and XP SP2 LAND attack vulnerability

Hello, everyone. Windows Server 2003 and XP SP2 with Windows Firewall turned off are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition...

CVE-2005-0545

CVE-2005-0545 affects Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 in Active Directory environments. The issue allows local users to bypass group policies that restrict access to hidden drives by using Office 10 applications (Word/Excel) Browse feature or via a flash drive. The vulner...

CVE-2005-0545: Undefined Security Weakness

Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been dispute...

CVE-2005-0500

CVE-2005-0500 affects Microsoft Internet Explorer 6 (IE6) bundled with Windows XP; the vulnerability is in how IE displays the title bar for script-initiated popup windows. Reported issues include spoofing the displayed domain name or title content in popups, potentially misleading users into bel...

CVE-2005-0500: Undefined Security Weakness

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks...

CVE-2004-1686

CVE-2004-1686 affects Internet Explorer 6.0 on Windows XP SP2. A vulnerability allows remote attackers to bypass the Information Bar prompt for ActiveX and JavaScript by crafting an XHTML page containing an Internet Explorer formatted comment between the DOCTYPE and HTML tags, demonstrated with t...

CVE-2004-1686: Undefined Security Weakness

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer Activ...

CVE-2004-1361

The CVE-2004-1361 issue affects Microsoft Windows where winhlp32.exe parses help files (.hlp). Affected: Windows NT, Windows 2000 (SP4), Windows XP (SP2), Windows 2003; vulnerability arises from an integer/length miscalculation in handling .hlp content, causing a heap-based buffer overflow. Conse...

CVE-2005-0110

In scope: CVE-2005-0110 affects Internet Explorer 6 on Windows XP SP2. The documented issue is that a web page containing a body element with an onclick tag (demonstrated via createElement) can bypass the file download warning dialog and potentially allow execution of arbitrary code by a remote a...

CVE-2005-0110: Undefined Security Weakness

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function...

Peer2Mail 1.4 - Encrypted Password Dumper

/ Peer2Mail Encrypt PassDumper Exploit v1.0 Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] / / Peer2Mail 1.4 and prior versions are affected. Tested for gmail account on Win XP SP2 / include include...

CVE-2005-0110

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function...

CVE-2004-1331: Undefined Security Weakness

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command...

CMDExe.txt

This unpatched vulnerability is a variant of the "Auto SP2 RC Exploit" Solution : Set the security level for all zones to "High" in Internet Explorer // index.htm // locate.HHClick;setTimeout"locator.HHClick",100;setTimeout "window.opener=null;window.close",10000 // htm.txt // document.write" par...

MSXPSP2-ieEXP.txt

This is a multi-part message in MIME format. ------=NextPart00000B201C4E9A9.341A2510 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Did they really do a good job on service pack 2? Was it worth the investment that's reported more then the missile defense system? All...

DEBIAN-CVE-2004-0829

smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...

CVE-2004-1043: Undefined Security Weakness

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control hhctrl.ocx to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as...

Microsoft Internet Explorer SP2 Fully Automated Remote Compromise

Microsoft Internet Explorer SP2 Fully Automated Remote Compromise Dec, 21 2004 Vulnerable ---------- - Microsoft Internet Explorer 6.0 - Microsoft Windows XP Pro SP2 - Microsoft Windows XP Home SP2 Not Tested ------------------------ - Microsoft Windows 98 - Microsoft Internet Explorer 5.x -...

Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass

// sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;" & "Extensions=asc,csv,tab,txt;" & "Persist Security Info=False" Dim sql sql =...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...