microsoft windows 2003 server 2000 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote malicious users to execute arbitrary code via HTML with an EMBED element co...

3 EDB exploits

7.5

CVSSv2

The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote malicious users to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as dem...

Microsoft Windows 2000 Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server R2

10

CVSSv2

The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote malicious users to cause a denial of service (crash) and possibly ex...

Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server 2003 Microsoft Windows 2003 Server R2

10

CVSSv2

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote malicious users to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP ...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows Nt 4.0 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server 2003 Microsoft Windows 2003 Server R2

2 EDB exploits

7.5

CVSSv2

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote malicious users to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Cont...

Microsoft Exchange Server 2000 Microsoft Windows Server 2003 R2 Microsoft Windows Server 2003 -Microsoft Windows Xp -Microsoft Windows Server 2003 Sp1 Microsoft Windows 2000 -

7.5

CVSSv2

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote malicious users to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup ...

Microsoft Proxy Server 2.0 Microsoft Isa Server 2000 Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server 2003

9.3

CVSSv2

The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote malicious users to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE:...

Microsoft Visual Studio .net 2000 Microsoft Visual Studio .net 2003 Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server 2003 Microsoft Windows 2003 Server Xp Sp2

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote malicious users to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an...

Microsoft Windows 2003 Server Datacenter Edition Microsoft Windows 2003 Server Enterprise Edition Itanium Microsoft Windows 2003 Server Standard 64-bit Microsoft Windows 2003 Server Web Microsoft Windows Xp Microsoft Windows 2000 Microsoft Windows 2003 Server Datacenter Edition Itanium Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server Sp1 Microsoft Windows 2003 Server Standard Microsoft Windows 2000 Resource Kit Microsoft Windows 2003 Server Enterprise Edition

1 EDB exploit

6.4

CVSSv2

The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote malicious users to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.

Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows 2003 Server

2 EDB exploits

10

CVSSv2

Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote malicious users to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."

Microsoft Windows 2003 Server Xp Sp2 Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server Sp1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook