CVE-2000-0663

The registry entry for the Windows Shell executable Explorer.exe in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path"...

CVE-2000-0650

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse...

access.vba.txt

Microsoft Access Trojan VBA code: The overlooked "macro virus" -- Brief Summary: Microsoft Access Databases are not afforded "Macro execution protection" in the manner of Word/Excel/Powerpoint documents. Attackers can insert trojan VBA code into MS Access documents to execute arbitrary commands o...

Microsoft Windows SMB Registry : Key Permissions Path Subversion Local Privilege Escalation

Some SYSTEM registry keys can be written by non administrator. These keys contain paths to common programs and DLLs. If a user can change a path, then he may put a trojan program into another location say C:/temp and point to it. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

SubSeven Trojan Detection

This host seems to be running SubSeven on this port. SubSeven is a Trojan Horse which allows an intruder to take the control of the remote computer. An attacker may use it to steal your passwords, modify your data, and preventing you from working properly. C Tenable Network Security, Inc. Added...

mstream DDoS Agent Detection

The remote host appears to be running a mstream agent, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool It is very likely that this host has been compromised %NASLMINLEVEL 70300 C Tenabl...

All Users startup folder left open if unattended install and OEMP reinstall=1

About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...

<Антивирус Касперского> получает сертификат Trojan Checkmark

No description provided...

<Антивирус Касперского> получает сертификат Trojan Checkmark

Пресс Релиз Антивирус Касперского получает сертификат Trojan Checkmark Первый российский антивирус гарантированно защищает пользователей от Троянских коней! "Лаборатория Касперского" www.avp.ru, российский лидер в области разработки антивирусных систем безопасности, сообщает, что ее продукты для...

CVE-2000-0197

The CVE-2000-0197 entry describes a local privilege escalation in Windows NT where the scheduler uses the drive mapping of the currently logged-in interactive user. A local attacker could gain privileges by placing a Trojan horse batch file in place of the original batch file, enabling execution ...

CVE-2000-0197

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...

Shaft Trojan Detection

The remote host appears to be running Shaft, which is a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool. It is very likely that this host has been compromised %NASLMINLEVEL 70300 C Tenable Network...

Trin00 for Windows Trojan Detection

The remote host appears to be running Trin00 for Windows, a trojan that can be used to control your system or make it attack another network this is actually called a distributed denial of service attack tool. It is very likely that this host has been compromised. %NASLMINLEVEL 70300 C Tenable...

CVE-2000-0197

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file...

Trin00 Trojan Detection

The remote host appears to be running Trin00, a Trojan Horse that can be used to control your system or make it attack another network this is actually called a Distributed Denial Of Service attack tool. It is very likely that this host has been compromised. %NASLMINLEVEL 70300 C Tenable Network...

CVE-1999-0572

.reg files are associated with the Windows NT registry editor regedit, making the registry susceptible to Trojan Horse attacks...

EUVD-1999-0557

.reg files are associated with the Windows NT registry editor regedit, making the registry susceptible to Trojan Horse attacks...

CVE-1999-0661

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

CVE-1999-0572

CVE-1999-0572 concerns the association of .reg files with the Windows NT registry editor (regedit). The root cause is that registering .reg files with regedit can enable Trojan Horse-style attacks by tricking users into running or importing a malformed registry script. The documents consistently ...

CVE-1999-0661

CVE-1999-0661 involves multiple widely-used packages (TCP Wrappers 7.6, util-linux 2.9g, wuftpd 2.2 and 2.1f, ircII 2.2.9, OpenSSH 3.4p1, Sendmail 8.12.6) that were replaced at distribution points by a Trojan Horse. The Red Hat advisory and other records corroborate the same core issue: compromis...