Rezultati pretraživanja za 'Proizvođač: microsoft'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-1981 | 5.0 | Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and ale | 2008-09-05 20:32:00 | 2002-12-31 05:00:00 |
| CVE-2002-1933 | 7.2 | The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window. | 2008-09-05 20:31:00 | 2002-12-31 05:00:00 |
| CVE-2002-1831 | 5.0 | Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field. | 2008-09-05 20:31:00 | 2002-12-31 05:00:00 |
| CVE-2002-1795 | 4.3 | Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors. | 2008-09-05 20:31:00 | 2002-12-31 05:00:00 |
| CVE-2002-0736 | 10.0 | Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank | 2008-09-05 20:28:00 | 2002-08-12 04:00:00 |
| CVE-2002-0481 | 5.1 | An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media | 2008-09-05 20:28:00 | 2002-08-12 04:00:00 |
| CVE-2002-0472 | 5.0 | MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users. | 2008-09-05 20:28:00 | 2002-08-12 04:00:00 |
| CVE-2002-0444 | 7.5 | Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number o | 2008-09-05 20:28:00 | 2002-07-26 04:00:00 |
| CVE-2002-0421 | 5.0 | IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr. | 2008-09-05 20:27:00 | 2002-08-12 04:00:00 |
| CVE-2001-1571 | 5.0 | The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2321
Zapisa po stranici: