EUVD-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

CVE-1999-0391

CVE-1999-0391 involves the reuse of the SMB authentication cryptographic challenge in Windows 95/Windows 98, enabling an attacker to replay the response and impersonate a user. Affected software is Windows 95 and Windows 98; the vulnerability lies in the SMB authentication verification (cryptogra...

CVE-1999-0357

CVE-1999-0357 concerns a denial-of-service condition in Windows 98 and other operating systems triggered by crafted “oshare” packets, potentially involving invalid fragmentation offsets. The available documents confirm the affected platform is Windows 98, with the vulnerability being that remote ...

CVE-1999-0357

Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted "oshare" packets, possibly involving invalid fragmentation offsets...

telnet_heap_exploit.txt

Subject: telnet.exe heap overflow - remotely exploitable To: [email protected] Heap Overflow in windows 98 Telnet.exe - remote via IE5 ------------------------------------------------------------ Jeremy Kothe [email protected] or [email protected] More fun and games courtesy of Microso...

windows_exploits.txt

Subject: About IGMP and another exploit for Windows95x/98x To: [email protected] I got two exploit and test it... - The first one is Flushot by DarkShow. This exploit can drop the network connection in windows 95 and 98First Edition - The other one is Pimp by Rob Mosher, this exploit can...

MS_security_bulletin.txt

Subject: Microsoft Security Bulletin MS99-034 To: [email protected] The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-034...

windows.prn.flaw.txt

Date: Fri, 4 Jun 1999 08:20:16 -0400 From: "STEVENS, Eric" To: [email protected] Subject: Windows NT 4.0, 95, 98 ? networked PRN flaw -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I suppose that, in an effort to maintain reverse compatibility with old MS-DOS command line gurus, you cannot crea...

websuite.txt

Advisory: Buffer overflow in SmartDesk WebSuite v2.1 Platforms Affected: Windows NT, Windows 98 Found by: cmart [email protected] Date: 5/23/99 Description: ----------- WebSuite v2.1 will crash when an additional 250+ characters is appended after the sites URL on NT Server 4 and NT Workstatio...

outlook.express.mailbox.dos.txt

Outlook Express Win98 bug Miquel van Smoorenburg [email protected] Tue, 11 May 1999 10:58:41 +0200 There is a bug in Outlook Express delivered with Windows '98, at least version 4.72.3110.1 4.01 SP1 and 4.72.3120.0 4.01 SP1 + oepatsp1 Windows '95 updated with MSIE 4.01 has Outlook Express...

windows98.pingflood.txt

Date: Wed, 17 Feb 1999 03:17:26 -0300 From: Fabio Bastiglia Oliva To: [email protected] Subject: Pingflood attack against Windows98 rewt wrote: Try pinging the windows box with large amounts of icmp...I left 5 screened pings, each set to 65000 size...Windows will freeze shortly after its loade...

win98explorer.txt

Date: Mon, 9 Feb 1998 17:49:45 -0800 From: Scott To: [email protected] Subject: Another Windows98 Bug... I'm not sure about the details of this problem, but when testing another buffer overflow, I created a long filename called "testfile.txt " note the chr160's at the end It is 235 characters ...

serve-U.DoS.txt

Date: Thu, 11 Feb 1999 21:36:13 -0600 From: Ryan Sweat To: [email protected] Subject: Buffer overflow in Serve-U I have successfully reprocuded this overflow in the newest Version of Serve-U. It totally crashes the ftp program, and also causes stack fault module in tcp/ip stack rendering the...

microsoft.privacy.issue.txt

Date: Tue, 11 May 1999 21:55:22 -0600 MDT From: cult hero To: InfoSec News Subject: ISN Everywhere your MAC address shows up Forwarded From: MICROSOFT'S HEAVY HAND IN THE COOKIE JAR A special report from YEOW - Barry Simon. See the Woody's Office Watch discussion and details on the Office 97...

novell-iwc-DoS.txt

Date: Wed, 30 Dec 1998 21:27:02 -0500 From: SecureXpert DIRECT Sender To: [email protected] Subject: SecureXpert Labs Advisory SX-98.12.30-01 SecureXpert Labs Advisory SX-98.12.30-01 This advisory updates advisory SX-98.12.23-01 DoS vulnerability in Novell Intranetware Client 3.0.0.0 Reported...

ms.personal.webserver.txt

Date: Sat, 27 Mar 1999 11:29:56 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-010 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...

windows98.bof.txt

Date: Mon, 15 Feb 1999 17:59:13 -0500 From: Ervin Fried To: [email protected] Subject: Re: Win98 Buffer Overflow File attached my .02$: Explorer has bugs in handling files with pathname longer than or equal to the documented max and files with components that exceed other maximums. CreateFile...

CVE-1999-0749

Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument...

Microsoft Windows 9598 Internet Explorer 5Telnet - Local Heap Overflow

Microsoft Windows 9598 Internet Explorer 5Telnet - Local Heap Overflow // source: https://www.securityfocus.com/bid/586/info Windows 95 and 98 systems running IE4 or specific versions of IE5 5.00.2314.1003 and 5.00.2314.1003IC are susceptible to a remote vulnerability that allows the execution of...

Microsoft Windows 95/98 Internet Explorer 5/Telnet - Local Heap Overflow

// source: https://www.securityfocus.com/bid/586/info Windows 95 and 98 systems running IE4 or specific versions of IE5 5.00.2314.1003 and 5.00.2314.1003IC are susceptible to a remote vulnerability that allows the execution of arbitrary code on a target that views a malicious web page. This...