CVE-2001-0349
- EPSS 4.63%
- Veröffentlicht 21.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious ...
CVE-2001-0350
- EPSS 0.53%
- Veröffentlicht 21.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious ...
CVE-2001-0351
- EPSS 1.3%
- Veröffentlicht 21.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.
CVE-2001-0502
- EPSS 1.6%
- Veröffentlicht 21.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login ...
CVE-2001-1302
- EPSS 1.12%
- Veröffentlicht 18.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a...
CVE-2001-1238
- EPSS 0.75%
- Veröffentlicht 16.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that c...
- EPSS 20.36%
- Veröffentlicht 07.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets ...
CVE-2001-0238
- EPSS 11.96%
- Veröffentlicht 02.07.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
- EPSS 45.73%
- Veröffentlicht 27.06.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
- EPSS 87.61%
- Veröffentlicht 27.06.2001 04:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.