microsoft windows 2000 - vulnerabilities and exploits

(subscribe to this query)

Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file.

Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services

2 EDB exploits

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, ak...

Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services

10 EDB exploits

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote malicious users to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.

Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services

9 EDB exploits

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote malicious users to execute arbitrary code via HTML with an EMBED element co...

Microsoft Windows-nt Datacenter Server Microsoft Windows-nt Xp Microsoft Windows-nt Xp Tablet Pc Microsoft Windows 2000 Microsoft Windows 2000 -Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server Sp1 Microsoft Windows 2000 Advanced Server Sp2 Microsoft Windows 2000 Advanced Server Sp3 Microsoft Windows 2000 Advanced Server Sp4 Microsoft Windows 2003 Server Datacenter Edition Microsoft Windows 2003 Server Datacenter Edition 64-bit

3 EDB exploits

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote malicious users to cause a denial of service via a command with a malformed data transfer (BDAT) request.

Microsoft Exchange Server 2000 Microsoft Windows 2000 -Microsoft Windows Xp

The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote malicious users to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remo...

Microsoft .net Windows Server Beta3 Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services Microsoft Windows Xp

The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote malicious users to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as dem...

Microsoft Windows 2000 Microsoft Windows 2003 Server 2000 Microsoft Windows 2003 Server R2

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote malicious users to cause a denial of service (memory exhaustion) via a large number of malformed posts.

Microsoft Exchange Server 2000 Microsoft Windows 2000 Microsoft Windows Nt 4.0

Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and previous versions, (2) Microsoft SQL Server 2000 and previous versions, (3) Windows NT 4.0, and (4) Windows 2000 allow remote malicious users to cause a denial of service via malformed inputs.

Microsoft Exchange Server 5.0 Microsoft Exchange Server 5.5 Microsoft Exchange Server 2000 Microsoft Sql Server 7.0 Microsoft Sql Server 2000 Microsoft Windows Nt 4.0 Microsoft Windows 2000 -Microsoft Windows 2000

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote malicious user to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption i...

Microsoft .net Windows Server Beta3 Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services Microsoft Windows Nt 4.0 Microsoft Windows Xp

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook