276 matches found
CVE-2000-1149
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability...
CVE-2000-1149
The CVE-2000-1149 issue affects Microsoft Windows NT 4.0 Terminal Server, where a buffer overflow in RegAPI.DLL allows remote code execution via a specially crafted username. The vulnerability can be exploited by anyone with access to port 3389/TCP and could grant the attacker the privileges of a...
CVE-2000-1149: Undefined Security Weakness
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability...
CVE-2000-1149
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability...
Windows NT 4.0 Terminal Server RegAPI.DLL Buffer Overflow
CORE SDI http://www.core-sdi.com Vulnerability Report For Microsoft Windows NT 4.0 Terminal Server GINA Date Published: 2000-11-08 Advisory ID: CORE-20001108 Bugtraq ID: 1924 CVE CAN: Non currently assigned. Title: Windows NT 4.0 Terminal Server RegAPI.DLL Buffer Overflow Class: Boundary Error...
Security Bulletin (MS00-087)
Microsoft Security Bulletin MS00-087 - -------------------------------------- Patch Available for "Terminal Server Login Buffer Overflow" Vulnerability Originally posted: November 08, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Window...
CVE-2000-0305: Undefined Security Weakness
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...
CVE-2000-0089
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...
CVE-2000-0089
Technical details about CVE-2000-0089 are not publicly available in the provided connected documents. Monitor for updates from official sources; current documents reiterate the legacy vulnerability description without additional specifics.
CVE-2000-0089: Undefined Security Weakness
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...
CVE-1999-0680
Technical details (affected products/versions, root cause, exploit info) are not publicly provided in the connected documents. Monitor for updates.
CVE-1999-0680: Improper Authentication
Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service...
nt4+sp4.profile.quota.dos.txt
Date: Fri, 21 May 1999 01:15:11 +0200 From: Tonino Lucca To: [email protected] Subject: Ordinary user can easily surpass profiles quota in NT+SP4 Hi all, File system full in %systemdrive% in Terminal Server can easily be reached by an ordinary user by growing his own profile so...
nt4+sp4.wts.4.0.txt
Date: Wed, 9 Jun 1999 01:07:04 +0200 From: mRm3n4c3 To: [email protected] Subject: Bug in WTS 4.0 on WinNT 4.0 sp4 I have recently encountered what i believe to be a bug in NT security when using Windows Terminal Server 4.0 on NT 4.00.1381 Service Pack 4. The problem occured in an environment...