Windows 2000 Terminal Services (Microsoft) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2005-06-14. Vendor: Microsoft.

CVEs of Windows 2000 Terminal Services

• CVE-2005-1214 - CVSS 5.1 (medium), 2005-06-14: Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
• CVE-2005-1212 - CVSS 7.5 (high), 2005-06-14: Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo,…
• CVE-2003-0496 - CVSS 7.2 (high), 2003-08-18: Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored…
• CVE-2003-0112 - CVSS 4.6 (medium), 2003-05-12: Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.
• CVE-2003-0111 - CVSS 7.5 (high), 2003-05-05: The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote…
• CVE-2002-1561 - CVSS 5 (medium), 2003-04-02: The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed…
• CVE-2003-0109 - CVSS 7.5 (high), 2003-03-31: Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to…
• CVE-2003-0010 - CVSS 7.5 (high), 2003-03-24: Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote…
• CVE-2003-0003 - CVSS 7.5 (high), 2003-02-07: Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local…
• CVE-2003-0001 - CVSS 5 (medium), 2003-01-17: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from…
• CVE-2002-1933 - CVSS 7.2 (high), 2002-12-31: The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow…
• CVE-2002-1258 - CVSS 5 (medium), 2002-12-23: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote…
• CVE-2002-1257 - CVSS 10 (critical), 2002-12-23: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes…
• CVE-2002-1325 - CVSS 5 (medium), 2002-12-23: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the…
• CVE-2002-1256 - CVSS 5 (medium), 2002-12-23: The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing…
• CVE-2002-1260 - CVSS 7.5 (high), 2002-12-23: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access…
• CVE-2002-1230 - CVSS 4.6 (medium), 2002-11-04: NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via…
• CVE-2002-1214 - CVSS 7.5 (high), 2002-10-28: Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute…
• CVE-2002-0863 - CVSS 5 (medium), 2002-10-11: Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which…
• CVE-2002-0864 - CVSS 5 (medium), 2002-10-11: The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled…
• CVE-2002-0694 - CVSS 7.5 (high), 2002-10-10: The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP…
• CVE-2002-0693 - CVSS 7.5 (high), 2002-10-10: Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server…
• CVE-2002-0720 - CVSS 7.2 (high), 2002-09-05: A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler…
• CVE-2002-0444 - CVSS 7.5 (high), 2002-07-26: Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the…