118 matches found
KPMG-2002032: Macromedia Sitespring Cross Site Scripting
-------------------------------------------------------------------- Title: Macromedia Sitespring Cross Site Scripting BUG-ID: 2002032 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user could use a default error page as...
KPMG-2002026: Jrun sourcecode Disclosure
-------------------------------------------------------------------- Title: Jrun sourcecode Disclosure BUG-ID: 2002026 Released: 01st Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible for a malicious user to trick the Jrun webserver int...
KPMG-2002020: Resin view_source.jsp Arbitrary File Reading
-------------------------------------------------------------------- Title: Resin viewsource.jsp Arbitrary File Reading BUG-ID: 2002020 Released: 17th Jun 2002 -------------------------------------------------------------------- Problem: ======== In a default installation of Resin server, the...
Windows 2000 Server IIS 5.0 .ASP Overflow Exploit
Summary: ======== The following code will allow you to safely test your system for the below motioned vulnerability. For more information about this vulnerability see http://www.eeye.com/html/press/PR20020410.html previous article:"windows 2000 and NT4 IIS .ASP Buffer Overflow". The following cod...
KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS
-------------------------------------------------------------------- Title: Microsoft Distributed Transaction Coordinator DoS BUG-ID: 2002015 Released: 19th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the way MSDTC handles malformed...
KPMG-2002006: Lotus Domino Physical Path Revealed
-------------------------------------------------------------------- -=Lotus Domino Physical Path Revealed=- courtesy of KPMG Denmark BUG-ID: 2002006 Released: 02nd Apr 2002 -------------------------------------------------------------------- Problem: ======== Due to problems handling Windows DOS...
KPMG-2002005: BitVise WinSSH Denial of Service
-------------------------------------------------------------------- -=BitVise WinSSH Denial of Service=- courtesy of KPMG Denmark BUG-ID: 2002005 Released: 18th Mar 2002 -------------------------------------------------------------------- Problem: ======== Using "ill-intended connection attempts...
Microsoft ISA Server Fragmented Udp Flood Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---- Microsoft ISA Server Fragmented Udp Flood Vulnerability ---- - ---- Type A system resource is exhausted. - ---- Summary A fragmented Udp attack through the microsoft isa server makes the system hampered by using the cpu at 100. Meanwhile server...
Security Bulletin MS01-052
---------------------------------------------------------------------- Title: Invalid RDP Data can Cause Terminal Service Failure Date: 18 October 2001 Software: Windows NT 4.0 Server, Terminal Server Edition, Windows 2000 Server and Advanced Server Impact: Denial of service Max Risk: Moderate...
Security Bulletin MS01-040
---------------------------------------------------------------------- Title: Invalid RDP Data Can Cause Memory Leak in Terminal Services Date: 25 July 2001 Software: Windows 2000 Server and Windows NT 4.0, Terminal Server Edition Impact: Denial of Service Bulletin: MS01-040 Microsoft encourages...
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (5)
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 5 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (6)
Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 6 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...
def-2001-24: Windows 2000 Kerberos DoS
====================================================================== Defcom Labs Advisory def-2001-24 Windows 2000 Kerberos DoS Author: Peter Grьndl [email protected] Release Date: 2001-05-09 ======================================================================...
UDP Ping-pong in Win2k
Sorry if this is already well-known. Windows 2000 server with an open UDP Kerberos v5 port 464 is vulnerable to a UDP ping-pong attack where you send a packet with someone elses IP address and chargen source port to it. Drives CPU usage on my test system to approx. 70. AFAIK affected systems: Win...
CVE-2000-0580
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...
CVE-2000-0580
CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...
CVE-2000-0580
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...
