PT-2002-2788 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: Eraser version 5.3 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

PT-2002-2787 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems...

PT-2002-2789 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: PGP versions 6.x through 7.x Description: The issue allows attackers to recover sensitive information that was supposed to be deleted by not clearing Windows alternate data streams attached to files on NTFS file systems. Recommendations: For...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 has a vulnerability where file sizes in alternate data streams are not recorded, allowing quota bypass. Affected: QuotaAdvisor 4.1. Root cause: improper handling of alternate data streams leading to inaccurate quota accounting (partial impact on confidentiality, integrity,...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

CVE-2000-0927

WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions...

Дырки в Quota Advisor

Пользователь может обойти установленные файловые квоты используя NTFS-потоки. Например: type bigfile.txt nullfile.txt:hidden Кроме того, возможно получить список локальных файлов...

DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

DST2K0037.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 25/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

Новое поколение вирусов под Windows 2000

Новый вирус Stream использует альтернативные потоки данных NTFS, позволяющие придавать файлам новые атрибуты, для хранения тела зараженного файла, что усложняет процесс лечения вируса...

DoS против Windows Media

Некоректный запрос к кодировщику потока приводит к его отказу, таким образом можно остановить все real-time потоки...

CVE-1999-0908

Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutexenter...

CVE-1999-0908

Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutexenter...

Microsoft IIS 3.04.0 Microsoft Personal Web Server 2.03.04.0 - ASP Alternate Data Streams

Microsoft IIS 3.04.0 Microsoft Personal Web Server 2.03.04.0 - ASP Alternate Data Streams source: https://www.securityfocus.com/bid/149/info Microsoft IIS and other NT webservers contain a vulnerability that allows remote users to obtain the source code for an ASP file. When one appends ::$DATA t...

Microsoft IIS 3.0/4.0 / Microsoft Personal Web Server 2.0/3.0/4.0 - ASP Alternate Data Streams

source: https://www.securityfocus.com/bid/149/info Microsoft IIS and other NT webservers contain a vulnerability that allows remote users to obtain the source code for an ASP file. When one appends ::$DATA to an asp being requested, the ASP source will be returned, instead of executing the ASP. F...