CVE-2002-1940

LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...

CVE-1999-1201

Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service traffic amplification via a certain ICMP echo ping packet, which causes all stacks to send a ping response, aka TCP Chorusing...

CVE-1999-1189

Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file...

CVE-1999-1201

CVE-1999-1201 affects Windows 95/98 when multiple TCP/IP stacks are bound to the same MAC address. The condition allows a remote attacker to trigger traffic amplification by sending a particular ICMP echo, causing all stacks to reply to the same ping (TCP Chorusing). The vulnerability is document...

CVE-1999-1189

The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...

SmartStuff FoolProof Security Program 3.9.x - Administrative Password Recovery

// source: https://www.securityfocus.com/bid/10467/info FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized administrative access to the application...

CVE-2002-1940

LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...

CVE-2002-1692

Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up...

CVE-2002-2083

The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware login screen...

Problems with various windows FTP servers

Hi, I am just writing a small set of perl scripts, to test server implementations of different protocols agains common problems i.e. Buffer overflow and format strings.. . The first script is against FTP servers, and just stupidly sends stuff to a server, verifies if the server crashes and if it...

Matu FTP Server 1.13 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4792/info Matu FTP Server is a freely available FTP server for Microsoft Windows 95 and 98 operating systems. Matu FTP Server is vulnerable to a buffer overflow condition. It is possible for a malicious user to craft a request that will result in code...

CVE-1999-1104

Windows 95 uses weak encryption for the password list .pwl file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords...

CVE-1999-1104

CVE-1999-1104 affects Windows 95 password caching: the .pwl file is encrypted with weak protection, enabling a local attacker to decrypt cached passwords and potentially gain privileges. The available documents do not specify remediation or fixes; exploitation details are not provided.

CVE-1999-1105

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...

CVE-1999-1476

The CVE-1999-1476 entry describes a local-denial-of-service condition in Intel Pentium processors (MMX and Overdrive) caused by an invalid instruction, labeled the “Invalid Operand with Locked CMPXCHG8B Instruction.” Affects Intel-based operating systems such as Windows NT and Windows 95; impact ...

CVE-1999-1105

CVE-1999-1105 affects Windows 95 when Remote Administration and File Sharing for NetWare Networks is enabled. The vulnerability arises because a share (C$) is created upon remote administrator login, enabling a remote attacker to read arbitrary files by mapping the network drive. The available so...

CVE-1999-1380

Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, creating an insecure scripting context that allows remote attackers to execute arbitrary commands via the run option through malicious web pages loaded in browsers like Internet Explorer 3.0....

CVE-1999-1476

A bug in Intel Pentium processor MMX and Overdrive allows local users to cause a denial of service hang in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem...

Galacticomm Worldgroup 3.20 - Remote Web Server Denial of Service

Galacticomm Worldgroup 3.20 - Remote Web Server Denial of Service // source: https://www.securityfocus.com/bid/4186/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp...

ZBServer Pro DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZBServer Pro DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 15, 2002 Product / Vendor: ZBServer Pro Edition for Windows 95 and NT offers all the functionality of an integrated Web, Gopher, FTP and Chat server...