microsoft windows 2003 server web vulnerabilities and exploits

(subscribe to this query)

The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote malicious users to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote malicious users to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identic...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web

The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote malicious users to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (S...

Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

1 EDB exploit

Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card aut...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly invol...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

1 EDB exploit

Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote malicious users to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).

Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows malicious users to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

1 EDB exploit

The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote malicious users to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant...

Microsoft Windows 2003 Server Datacenter 64-bit Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

1 EDB exploit

Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted malicious users to execute arbitrary code via crafted embedded image data in a .hlp file.

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows Xp

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows malicious users to cause a denial of service and possibly execute arbitrary code.

Microsoft Windows 2000 Microsoft Windows 2003 Server Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook