Debploit: Microsoft Windows NT/2000 debug API privelege escalation updated since 15.03.2002
Published:		23.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1864
Type:		local
Level:		8/10
Description:		By connection to PLC port DbgSsApiPOrt it's possible to obtain handler for any process or thread for debugging.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional

Original document		MICROSOFT, Security Bulletin MS02-024: Authentication Flaw in Windows Debugger can Lead to Elevated Privileges (Q320206) (23.05.2002)
		Ashot Oganesyan K., Local Security Vulnerability in Windows NT and Windows 2000 (30.03.2002)
		Radim "EliCZ" Picha, DebPloit (exploit) (15.03.2002)

Files:		Debug API bug exploit
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Windows 2000 Active Directory LDAP DoS
Published:		23.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2033
Type:		local
Level:		5/10
Description:		Malformed LDAP-request causes Active Directory to hang.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Advanced Server

Original document

Jonathan Lamberson, Microsoft Active Directory security vulnerability (23.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in ServletExec ISAPI
Published:		23.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2034
Type:		remote
Level:		5/10
Description:		Physical path disclosure, directory traversal, DoS, buffer overflow.

Affected:

NEWATLANTA : ServletExec ISAPI 4.1

Original document

Matt Moore, Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 (23.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Cisco IP Phones updated since 23.05.2002
Published:		24.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2032
Type:		remote
Level:		5/10
Description:		Differenc DoS attacks scenarios and access to locked devices.

Affected:		CISCO : IP Phone 7910
		CISCO : IP Phone 7940
		CISCO : IP Phone 7960
		CISCO : ATA 186

Original document		CISCO, Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability (24.05.2002)
		CISCO, Multiple Vulnerabilities in CISCO VoIP Phones (23.05.2002)
		CISCO, Multiple Vulnerabilities in Cisco IP Telephones (23.05.2002)

Discuss:

Read or add your comments to this news (0 comments)