Unchecked Buffer in Windows Help(Q323255)

An unchecked buffer in Windows help could allow an attacker to could gain control over user's system. Maximum Severity Rating: Critical Recommendation: Customers should install the patch immediately. Affected Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

Microsoft Windows Shell fails to handle shortcut files properly

Overview Microsoft Windows Shell does not properly handle some shortcut files and may permit arbitrary code execution when a specially-crafted file is opened. Description Microsoft Windows supports files that point to another file, called "shortcut" files. These files have the .lnk extension, and...

MerakXSS.txt

ShineShadow Security Report 30092005-06 TITLE: Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting- edge Merak Mail Server Instant Antispam and much more, is the fastest,...

[Full-disclosure] Sophos Antivirus Library Remote Heap Overflow

Date August 26, 2005 Vulnerability The Sophos Antivirus Library provides file format support for virus analysis. During analysis of Visio files Sophos is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remotely...

Microsoft Windows Kernel Vulnerability

Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...

NSFOCUS SA2005-01 : Buffer Overflow in WinAMP in_cdda.dll CDA Device Name

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2005-01 Topic: Buffer Overflow in WinAMP incdda.dll CDA Device Name Release Date: 2005-01-27 CVE CAN ID: CAN-2004-1150 http://www.nsfocus.com/english/homepage/research/0501.htm Affected systems & software...

[Full-Disclosure] [AppSecInc Team SHATTER Security Advisory] Microsoft Windows LPC heap overflow

Microsoft Windows LPC heap overflow AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/general/07-0001.html January 10, 2005 Credit: This vulnerability was discovered and researched by Cesar Cerrudo of Application Security, Inc. Risk Level: High Summary: A local...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

Exploit for linux platform in category local exploits ============================================================= Linux Kernel 2.6.x chown Group Ownership Alteration Exploit ============================================================= / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $...

[sec-labs] Zone Alarm Device Driver vulnerability

sec-labs team proudly presents: Local ZoneAlarm Firewall probably all versions - tested on v3.1 Device Driver vulnerability. by Lord YuP 04/08/2003 I. BACKGROUND ZoneAlarm is a very powerful and very common nowadays firewall for Windows produced by Zone Labs. http://www.zonelabs.com II. DESCRIPTI...

[Full-Disclosure] [sec-labs] Zone Alarm Device Driver vulnerability

sec-labs team proudly presents: Local ZoneAlarm Firewall probably all versions - tested on v3.1 Device Driver vulnerability. by Lord YuP 04/08/2003 I. BACKGROUND ZoneAlarm is a very powerful and very common nowadays firewall for Windows produced by Zone Labs. http://www.zonelabs.com II. DESCRIPTI...

Samba contains multiple buffer overflows

Overview Samba contains several buffer overflow vulnerabilitites. At least one of these vulnerabilities could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service. Description Samba is a widely used open-source implementation of Server Message Block...

Technical information about the vulnerabilities fixed by MS-02-52

These are some technical details about some of the Java vulnerabilities we reported to Microsoft in August. These issues are corrected by the patch MS-02-52 which Microsoft released September 18. The patch and Microsoft's bulletin are available at...

MSXML 3.0 Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...

NetOP School Admin Vulnerability for Windows 2000 Terminal Services and NT4

NetOp School, a program for screen broadcast and remote control of Windows 3.1x, Windows 9x, Windows NT and Windows 2000 PCs including support for Windows 2000 Terminal Services and NT4 Terminal Server Edition across NetBIOS, IPX and TCP/IP. The problem arises in the way that netOP handles no...

ENTERCEPT SECURITY ALERT: Privilege Escalation Vulnerability in Microsoft IIS

ENTERCEPT SECURITY BULLETIN Date: Aug 15, 2001 Re: PRIVILEGE ESCALATION VULNERABILITY IN MICROSOFT IIS This information is distributed by Entercept Security Technologies to alert you of security vulnerabilities and how to prevent/protect against them. OVERVIEW: A serious vulnerability exists in...

ISC BIND 8.1 - Host Remote Buffer Overflow

ISC BIND 8.1 - Host Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1887/info An exploitable buffer overflow vulnerability exists in certain non-current versions of the ISC host command. host can be used to issue an AXFR command to effect a zone transfer for a given domain nam...

CVE-1999-0169

This entry documents CVE-1999-0169 affecting NFS, where an attacker can read and write any file on the system by specifying a false UID. The vulnerability centers on the NFS service’s UID handling, enabling full confidentiality and integrity/availability impact per the provided metrics. Connected...

GirlFriend Backdoor Detection

The remote host has the GirlFriend backdoor installed. This backdoor allows anyone to partially take control of the remote system. An attacker could use it to steal your password or prevent your system from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Security Update for Windows Server 2003 (KB982132)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...