Security News -  Security Reviews -  Exploits -  Tools -  UNIX Focus -  Windows Focus

SecuriTeam  Beyond Security  SecuriTeam Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam in Your Inbox New vulnerability? New tool? Tell us

Windows NT Focus Archive 2001 Select Year:  2008  2007  2006  2005  2004  2003  2002 2001  2000  1999  1998 December 2001 EFTP Directory Content Disclosure Multiple Overflow and Format String Vulnerabilities in Microsoft SQL Server PGP Plugin for Outlook Can Send Unencrypted Messages Internet Explorer HTTPS Certificate Attack SQL Server Text Formatting Functions Suffer from Buffer Overflows Atmel SNMP Non Public Community String DoS Vulnerability UPNP - Multiple Remote Windows XP/ME/98 Vulnerabilities Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, and Site Spoofing Bug FtpXQ Default Install Read/Write Capabilities Windows XP Security Concerns (Fast Switch, Password Reset, Remote Desktop) Windows FTP "Network Place" Exposes Saved Passwords MSIE May Download and Run Programs Automatically NoHTML Built-in Outlook 2002 Feature Protects Against Malicious Code Analysis of Microsoft SQL Server 2000 Stored Procedure Encryption Hot Key Permissions Bypass under Windows XP Internet Explorer 6 Allows Local File Reading (XMLHTTP) ASPSession ID's Vulnerability 13 December 2001 Cumulative Patch for IE Microsoft IIS/5 Bogus Content-Length Memory Bug Cross-Frame Security Zone Spoofing in Internet Explorer Using the 'About' Protocol IE Denial of Service (Bad IMG Tag) Another IE Denial of Service Attack (Box Value) Microsoft Outlook Express 6 "E-mail Attachment Security" Flawed Winsock RSHD/NT DoS File Locking and Security (Group Policy DoS on Windows 2000 Domains) UDP DoS Attack on Windows 2000 IKE Weak Encryption in Pathways Homecare Specially Malformed Script in HTML Mail Can Execute in Exchange 5.5 OWA mIRC DDE Permissions Security Bug ASPUpload Installs Exploitable Scripts by Default November 2001 NAI WebShield SMTP for WinNT MIME Header Vulnerability Allows BadTrans Virus to Pass Allaire JRun Directory Browsing Vulnerability JRun SSI Request Body Parsing Alchemy Eye HTTP Remote Command Execution File Extensions Spoofable in MSIE Download Dialog (and Also Opera) Additional IE Privacy Issues (File Existence Verification) Windows Media Player .ASF Processor Buffer Overflow Vulnerability Microsoft IIS Vulnerable to Log Faking Uncovering the Asterisks in Password Inputs Windows 2000 and Windows XP Terminal Services IP Spoofing November 2001 Cumulative Patch for IE ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Additional Details on the Microsoft IE Cookies Exposure via 'About:' URLS Denial of Service Vulnerability in Windows 2000 RunAs Service MS SQL 7.0 DTS Saved Packages Contain Plain Text Passwords RunAs Sensitive Data Exposure Microsoft Passport to Trouble Cookie Data in IE Can Be Exposed or Altered Through Script Injection WS_FTP server 2.0.3 Buffer Overflow (STAT) Internet Explorer System Information Disclosure Fuse Talk SQL Insertion Vulnerability Microsoft ISA Server Fragmented UDP Flood Vulnerability Invalid Universal Plug and Play Request Can Disrupt System Operation October 2001 Pc-to-Phone Sensitive Information Disclosure Trend Micro OfficeScan Corporate Edition Configuration File Disclosure Vulnerability JavaScript in IE Can Take Over the Whole Screen Citrix MetaFrame Remote Denial of Service Vulnerability DoS Found in Ssdpsrv.exe (UPnP) Invalid RDP Data can Cause Terminal Service Failure Ipswitch Web Calendaring Buffer Overflow Additional Details Released on the Zone Spoofing Vulnerability Ipswitch IMail Multiple Security Vulnerabilities Account Management Vulnerabilities in Ipswitch IMail Server Dotless IP Addresses Can Cause IE to Move into Intranet Zone Microsoft Excel/PowerPoint Documents can Bypass Microsoft Macro Security Checking Symantec LiveUpdate Vulnerable to Security Attacks Combining URLScan With FrontPage (HOWTO) September 2001 Two Problems Found with Alexis/InternetPBX from COM2001 ARCserveIT Storage Management Backup Account Password Disclosure Meteor FTPD Directory Traversal PGP Keyserver's Inadequate Permissions Deeply nested OWA Request Can Consume Server CPU Availability WebSphere Cookie and Session-id Predictability XCache Web Server Cache Path Disclosure Outlook Express 6 Security Vulnerabilities Trend Micro InterScan eManager for NT Multiple Buffer Overflow Vulnerabilities NetOp School Admin Vulnerability (Authorization Bypass) Information Leak Found in Counterpane/Bruce Schneier's Password Safe Program Malformed Request to RPC Endpoint Mapper Causes RPC Service to Fail iPlanet Messaging Server Buffer Overflow Vulnerability Cache Corruption on Microsoft DNS Servers DynuFtpServer Security Vulnerabilities Exchange Public Folders Information Leakage August 2001 Outlook2000 Animated Assistant & Password Protected Screen Saver Vulnerability Outlook Express 6 Attachment Protection Bypassing JRun 3.1, JRun 3.0 JSP Source Viewing Vulnerability (::$TA) TrendMicro OfficeScan Corp Edition Remote File Reading Vulnerability Respondus Stores Passwords Using Weak Encryption Methods AVTronics InetServer DoS and Buffer Overflow Vulnerabilities Access Violation in Windows 2000 IRDA Driver Can Cause System to Restart BadBlue File Viewing Vulnerability IrDA Semi-Remote Vulnerability WinWrapper Professional Remote File Disclosure Vulnerability Microsoft Releases Two Security Tools Trend Micro Virus Buster Remote File Disclosure (IUSER Privilege) SlimFTPd Directory Traversal Cerberus FTP Server Directory Traversal Dynu FTP Server Directory Traversal Vulnerability Microsoft IIS ssinc.dll Buffer Overflow Vulnerability 15 August 2001 Cumulative Patch for IIS Cross Site Scripting and Memory Leak Vulnerabilities in ISA Server NNTP Service in Windows Contains Memory Leak pcAnywhere Vulnerable to a DoS (Multiple Connections) Sambar Telnet Proxy Multiple Vulnerabilities (DoS, Buffer Overflow) Internal IP Address Disclosure in Microsoft-IIS 4.0 and 5.0 Code Red II - New Non-variant Code Red Worm - Analysis Outlook 2000 Rich Text Information Disclosure Poor Security on Default Windows 2000 Server Installation Could Lead to Unauthorized Database Access Security Flaw in Indentix BioLogon Client for Windows MS Windows Media Player ASF Marker Buffer Overflow InterScan VirusWall Standard and CVP Edition are Unable to Detect SIRCAM (Patch Available) 1st Choice FTPPro Stores Passwords Insecurely July 2001 Cold Fusion CFRETHROW Exploit Multiple Remote DoS Vulnerabilities in Microsoft DCE/RPC Daemons Multiple Windows-Based FTP Servers Vulnerable to DoS under Windows 98 Snapstream PVS Security Vulnerability ZoneAlarm Pro's MailSafe Insecurity Windows Media Player .NSC Processor Buffer Overflow Vulnerability Malformed RPC Request Can Cause Service Failure (Exchange, SQL, Windows) WS_FTP Server Buffer Overflow and Possible DoS Invalid RDP Data Can Cause Memory Leak in Terminal Services Sambar Web Server Pagecount Exploit Code Services for UNIX 2.0 Suffer from a Remotely Triggered Memory Leak Proxomitron Cross-Site Scripting Vulnerability Full Analysis of the .IDA "Code Red" Worm Sambar Web Server Allows Execution of Arbitrary Batch Files Norton Antivirus 2002 Security Flaws Not Filtering ';' Poses a Security Vulnerability in Forms that Post SQL Based Queries SimpleServer:WWW Command Execution Vulnerability Outlook View Control Exposes Unsafe Functionality (Exploit Code) IBM DB2 for Windows DoS (db2css, db2jds) TrendMicro InterScan WebManager HttpSave.dll Buffer Overflow Vulnerability Authentication Error in Windows 2000 SMTP Service Could Allow Mail Relaying Living Waterfalls Poses a Major Security Risk CesarFTP Vulnerable to a Buffer Overflow (HELP command) BisonFTP Server Directory Traversal Vulnerability (BDL files) LiteWebServer JSP Source File Discolsure vWebServer ASP Viewing and DoS Vulnerabilities (ASP Source, DOS Device, Long URL) SmallHTTP Server Vulnerable to DoS (Long URL) Multiple Vendors Vulnerable to LNK File Directory Traversal June 2001 TrendMicro InterScan VirusWall HttpSaveCVP.dll Buffer Overflow TrendMicro InterScan VirusWall SmtpScan.dll Buffer Overflow LiteServe Exposes CGI Source Code (8.3 filename) Issues with Windows 2000 Encrypting File System and Disk Wipe Software LDAP over SSL Exposes Password Changing Function Additional Details Revealed on FrontPage Extensions Buffer Overflow ASP Source Code Exposed Using Unicode Encoding Attack Cerberus FTP Server Remote DoS Attack Multiple Vulnerabilities in 1C: Arcadia (tradecli.dll) A-FTP Anonymous FTP Server Remote DoS Attack Malformed Word Document Enables Macro to Run Without Warning FrontPage Server Extension Sub-Component Buffer Overflow Vulnerability Several Security Flaws in Surge FTP Server (DoS, Directory Traversal) Oracle Redirect Denial of Service (Incomplete Connection) Unchecked Buffer in Index Server ISAPI Extension Leads to Web Server Compromise Multiple Vulnerabilities Found in AMLServer Norton Antivirus Real-time Protection can be Deactivated Trend Micro InterScan VirusWall FtpSaveCSP.dll Buffer Overflow SQL Query Method Enables Cached Administrator Connection to be Reused Trend Micro VirusWall Allows Reconfiguration without Authentication Security Bug in Internet Explorer Gives Remote File Access Broker FTP Server Vulnerable to DoS (dot space dot) Additional Details Released on the Windows Telnet Server Vulnerability PassWD2000 Weak Encryption Vulnerability Predictable Name Pipes Enable Privilege Elevation via Telnet Incorrect Attachment Handling in Exchange 2000 OWA Can Execute Scripts Outlook Express Address Book Spoofing Shambala FTP server Directory Traversal O'Reilly WebBoard JavaScript Code Execution Problem (Character Escape) PureEdge Internet Forms reveals ODBC passwords InterScan VirusWall Remote Configuration Vulnerability (FtpSave.dll) May 2001 SpoonFTP Buffer Overflow Vulnerabilities (CWD, LIST) GuildFTPD Buffer Overflow and Memory Leak DoS (SITE) CesarFTP Triple Dot Directory Traversal and Weak Password Encryption DynFX POPd Denial of Service Vulnerability (Long username) Eudora Allows Silent Delivery and Installation of Executables Microsoft Windows Media Player Buffer Overflow Vulnerability (IPADDRESS) Remote Vulnerabilities in OmniHTTPd (PHP DoS, Source viewing) WebAvail LinkMax2 ASP Script Security Problem (Authentication bypassing) GuildFTPD Directory Traversal / Weak Password Encryption Freestyle Chat Server Vulnerable to Directory Traversal and DoS Attack HyperTerminal Security Patch Re-Released Elevation of Privileges with Debug Registers on Win2K Symantec/Axent NetProwler Unsound Database Configuration WFTPD Directory Traversal and Buffer Overflow Vulnerabilities Bypassing SpyAnywhere Authentication RTF Document Linked to Template Can Run Macros without Warning Apache 8192 Chars String Bug InterScan VirusWall Buffer Overflow Vulnerability (RegGo.dll) Multiple Security Problems Found in eEye's SecureIIS CMail Vulnerable To a Buffer Overflow Attack (HELO) Flaws in Web Server Certificate Validation Could Enable Spoofing Additional Details Revealed on Windows 2000 Kerberos DoS MacAfee Remote Desktop Vulnerable to a DoS OmniHTTPd Pro Denial of Service Vulnerability (POST) IIS WebDav Lock Method Memory Leak (DoS) Superfluous Decoding Operation in IIS Allows Command Execution Additional Information on the IIS CGI Filename Decode Problem Securing Your IIS 5.0 Server Carello E-Commerce Arbitrary Command Execution IncrediMail Vulnerability Allows Overwriting of Files Multiple Vulnerabilities in Jana Webserver (replacement %2E, DoS) Microsoft Media Player ASX Parser Buffer Overflow Vulnerability (BANNER, VERSION) Denicomp REXECD/RSHD Denial of Service Vulnerability Index Server Search Function Buffer Overflow Vulnerability MP3Mystic Directory Traversal Vulnerability VdnsServer Vulnerable to a DoS Attack (Malformed Connection) ElectroComm Vulnerable to a DoS Attack (Long string) Spynet Chat Vulnerable to a DoS Attack (multiple connections) Sending Malformed Requests to Domain Controller can Cause Memory Exhaustion IIS 5.0 PROPFIND DoS Revisted (multiple ':') DoS Vulnerability in WFTPD (Accessing Floppy Drive) Unchecked Buffer in ISAPI Extension Enables Remote Compromise of IIS 5.0 Server April 2001 Winamp AIP Exploitable Buffer Overflow Directory Traversal Vulnerabilities found in RaidenFTPD Server Directory Traversal Vulnerability in Alex's FTP Server WebXQ Vulnerable to Directory Traversal Bug Directory Traversal Vulnerabilities Found in BRS WebWeaver Mirabilis ICQ WebFront Plug-in Denial of Service (Malformed GET) A Serious Security Vulnerability Found in BearShare (Directory Traversal) IPSwitch IMail SMTP Remote System Access Vulnerability (From:) Small HTTP Server Vulnerable to DOS Device DoS (AUX) NetCruiser HTTP Web Server Vulnerable to Path Revealing Attack New DoS Attack Against IE (Loop, MS Word) NT Drivers Potentially Vulnerable to Format String Bug (FSA Bug) IIS DoS attack (Anonymous lockout) Trend Micro's ScanMail for Exchange Stores Passwords Insecurely Potential Privileges Elevation Vulnerability in Windows NT/2000 XML Active Scripting vulnerability in IE and Outlook Express CheckBO Win9x Memo Overflow (DoS) The Bat! <cr> Bug Viking Vulnerable to Directory Traversal Xitami DoS (AUX, DOS device) WebDAV Service Provider Allows Scripts to Levy Requests as User SimpleServer:WWW security vulnerability (DOS device) Additional Details Revealed on ISA's DoS Vulnerability Accessing a Locked Workstation MS ActiveSync Invalid Web Request Can Cause Access Violation in ISA Server Web Proxy Service QPC FTPd Directory Traversal and Buffer Overflow Vulnerabilities QPC POPd Buffer Overflow Vulnerability Double clicking on Innocent Looking Files May be Dangerous Ghost Multiple DoS (TCP 2638, TCP 1347) PGP Split Key/Cached Passphrase Vulnerability Windows PGP (Pretty Good Privacy) ASCII Armor Parser Vulnerability EyeIS has a "double standard" Savant Web Server DoS Vulnerability (Host) 602Pro Lansuite vulnerable to a DoS (Proxy-Authorization) Local Buffer Overflow Vulnerability in Ping.exe Internet & Acceleration Server Event DoS The Bat! file extension vulnerability poses a security threat Additional details revealed about the DCOM VB T-SQL debugger vulnerability Tomcat Directory Listing and source Viewing Vulnerabilities Navision Financials Server DoS (NULL character) G6 FTP File Existence Disclosure and NetBIOS Hash Retrieval March 2001 Security Bug in Internet Explorer Exposes Local Files (MSScriptControl.ScriptControl) Windows 2000 Hardening Guide Trend Micro's ScanMail for Exchange Stores Passwords in the Registry Unprotected Incorrect MIME Headers Can Cause IE to Execute E-mail Attachments Website Pro Remote Manager DoS CCCHarvest Source Code Control Software Password Encryption Cracked Visual Studio VB-TSQL Object Buffer Overflow Vulnerability Security bugs found in interactions between IE 5.x, IIS 5.0 and Exchange 2000 Passwords for Compressed Folders are Recoverable Windows NT/2000 Crash Dump Files Insecure Permissions MDaemon IMAP vulnerable to a DoS attack (SELECT, EXAMINE) 602Pro Lansuite vulnerable to a DoS Bea Weblogic Directory Browsing Vulnerability REDI stock exchange software stores passwords in clear text SurfControl for MS Proxy Bypass Vulnerability Microsoft Personal Web Server Vulnerable to 'Unicode' Vulnerability Attackers Managed to Obtain Microsoft Digital Signing Keys WebSite Pro Path Disclosure Vulnerability NTMail Web Services DoS IIS 5.0 SEARCH method overflow MDaemon Dos-Device Denial of Service Vulnerability Remote DoS attack against SSH Secure Shell for Windows Servers Microsoft Outlook 2000 vCard Buffer Overrun (additional information) Malformed URL can cause Service Failure in IIS 5.0 and Exchange 2000 Winzip32 'zip and email' Buffer Overflow Savant 3.0 Web Server DoS Vulnerability Faststream FTP++ Server Chroot Breaking Vulnerability IIS 5.0 propfind DoS IE can Divulge Location of Cached Content (Patch Available) Broker FTP Server Still Vulnerable to Directory Traversal WebAdvisor from ServiceSoft Vulnerable to a DoS The Simple Server HTTPd Directory Traversal FtpXQ Vulnerable to Chroot Breaking Orange Web Server Vulnerable to a DoS (Long URL) A1 Server HTTPd Vulnerable to a DoS and Directory Traversal TYPSoft FTP Server vulnerable to chroot breaking SilmServe FTPd vulnerable to chroot breaking SEDUM HTTPd vulnerable to a DoS (long URL) February 2001 Windows 2000 Event Viewer Buffer Overflow Vulnerability Additional information available on the DoS attack on Microsoft's PPTP SurfinGuard's security mechanism can be bypassed (default settings) Netscape Collabra DoS Outlook and Outlook Express VCard Handler Buffer Overflow Vulnerability HSWeb root exposure vulnerability Malformed Request to Domain Controller can cause Denial of Service VShell code execution and port forwarding permissions BadBlue Web Server Ext.dll vulnerabilities WEBactive HTTP Server Directory Traversal Symantec pcAnywhere DoS vulnerability (Patch available) Windows Media Player Skins File Download vulnerability (Patch available) Smart card security policy behavior not always enforced Malformed PPTP Packet Stream DoS Vulnerability (Patch available) Symantec PCAnywhere Buffer Overflow DoS Using Wingate proxies as redirectors NTLMSSP Privilege Elevation vulnerability (Patch Available) Server Worx Web Server Directory Traversal Network DDE Agent Request vulnerability (Patch available) Windows client UDP exhaustion Denial of Service Directory Traversal Vulnerability in AOLserver Invalid RDP Data vulnerability (Patch available) Apple QuickTime Plug-in Buffer Overflow SlimServe HTTPd vulnerable to a DoS (Long URL) January 2001 New Variant of the "File Fragment Reading via .HTR" vulnerability (Patch available) ATT VNC Windows Server buffer overflow ATT VNC Windows Client buffer overflow Microsoft Releases Tool and Patch to Correct Hotfix Packaging Anomalies mIRC password protection can be bypassed Another IBM WebSphere showcode vulnerability found (Host alias) Parsing Overflow in Microsoft PowerPoint 2000 (Technical details) Winsock Mutex vulnerability (Patch available) JRun Malformed URI Vulnerability shows file and directory content (Patch available) PowerPoint File Parsing Buffer Overrun Vulnerability Netscape Enterprise Server Dot-Dot Denial of Service Netscape FastTrack Server Caching DoS GoodTech Systems' FTP Connection DoS RiadaLock Java password insecurity Multiple vulnerabilities found in FaSTream FTP++ LocalWEB Directory traversal vulnerability Invalid WINS entries can be used to gather usernames and passwords Security Hole in Compaq Web-Based Management Leads to Remote Compromise HTML.dropper vulnerability allows creation of emails that contain hidden attachments WMP and IE java vulnerability, executing arbitrary programs (SKIN, WMZ) Stack overflow in MSHTML.DLL (Exploit Code) Exact Dental Default Installation Leaves Users Exposed Web Extender Client NTLM Authentication vulnerability (Patch available) DoS vulnerability in ConferenceRoom Oracle XSQL servlet and xml-stylesheet allow arbitrary java code execution on the web server IIS 5.0 file source exposure using %3F+.htr PGP signature verification vulnerability IBM WebSphere Kernel Leak DoS ImageCast IC3 Control Center DoS Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root Frontpage Publishing Denial of Service Windows Media Player 7 and IE vulnerability allows remote command execution WinRoute Pro Disables Memory Protection WinRoute Pro Mail Server security risk Select Year:  2008  2007  2006  2005  2004  2003  2002 2001  2000  1999  1998 Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews Calendarix Basic Two SQL Injection Vulnerabilities Intel BIOS Plain Text Password Disclosure DriveCrypt Security Model Bypass and Incorrect BIOS API Usage Multiple Heap Overflows in Xine-Lib Windows Media Services (nskey.dll) CallHTMLHelp Buffer Overflow Trend Micro Products Web Management Authentication Bypass Anzio Web Print Object Buffer Overflow VMware Workstation (hcmon.sys) Local DoS Vulnerability Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (MS08-043) Microsoft Windows Messenger Illegal Access Vulnerability (MS08-050) More ››› Featured Articles Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (MS08-043) MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface Sun xVM VirtualBox Privilege Escalation Vulnerability Vulnerabilities in DNS Allows Spoofing (MS08-037) Vulnerabilities in Microsoft SQL Server Allows Elevation of Privilege (MS08-040) Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks libpoppler Uninitialized Pointer

Copyright © 1998-2007 Beyond Security All rights reserved.
Terms of Use Site Privacy Statement.