Free windows denial service vulnerability software for windows

Windows NT NNTP Denial of Service Vulnerability Patch MS01-043 has come as a smart tool to remove a denial of service vulnerability in Windows NT 4.0 computers running the Network News Transfer Protocol (NNTP) service. This denial of service vulnerability exists because the NNTP service in computers running Windows NT 4.0 contains a memory leak. If a malicious user sends a large amount of specially malformed data to an affected server, it can deplete the memory that is available to the server, which can cause the server to stop performing.

Windows 2000 LPC Vulnerability Patch is a highly-efficient, high-quality patch which eliminates several security vulnerabilities that could allow a range of effects, from denial of service attacks to, in some cases, privilege elevation. Several vulnerabilities have been identified in the Windows NT 4.0 and Windows 2000 implementations of LPC and LPC ports:

• The Invalid LPC Request vulnerability, which affects only Windows NT 4.0. By levying an invalid LPC request, it would be possible to make the affected system fail.
• The LPC Memory Exhaustion vulnerability, which affects both Windows NT 4.0 and Windows 2000. By levying spurious LPC requests, it could be possible to increase the number of queued LPC messages to the point where kernel memory was depleted.
• The Predictable LPC Message Identifier vulnerability, which affects both Windows NT 4.0 and Windows 2000. Any process that knows the identifier of an LPC message can access it; however, the identifiers can be predicted. In the simplest case, a malicious user could access other process LPC ports and feed them random data as a denial of service attack. In the worst case, it could be possible, under certain conditions, to send bogus requests to a privileged process in order to gain additional local privileges.
• A new variant of the previously-reported Spoofed LPC Port Request vulnerability. This vulnerability affects Windows NT 4.0 and Windows 2000, and could, under a very restricted set of conditions, allow a malicious user to create a process that would run under the security context of an already-running process, potentially including System processes.

Because LPC can only be used on the local machine, none of these vulnerabilities could be exploited remotely. Instead, a malicious user could only exploit them on machines that he/she could log onto interactively. Typically, workstations and terminal servers would be chiefly at risk, because, if normal security practices have been followed, normal users will not be allowed to log onto critical servers interactively. This also means that, even in the worst case, the vulnerability would only confer additional local-'not domain-'privileges on the malicious user.

Windows Phone Book Service Buffer Overflow Vulnerability Patch 1.0 is developed to be a helpful program to remove a security vulnerability in an optional service that ships with Windows 2000 Servers. The vulnerability could allow a malicious user to execute hostile code on a remote server that is running the service.

WebTV Denial of Service Vulnerability Patch (Windows Me) (MS00-074) is a professional and smart patch which eliminates a security vulnerability in Microsoft WebTV for Windows.

There is a denial of service vulnerability in WebTV for Windows that may allow a malicious user to remotely crash either the WebTV for Windows application and/or the computer system running WebTV for Windows. Restarting the application and/or system will return the system to its normal state.

Although the WebTV for Windows application ships with Windows 98, 98SE, and Windows Me products, the application is not installed by default, and customers who have not installed it would are not at risk.

Windows 2000 Still Image Service Privilege Escalation Vulnerability Patch has come as a helpful program to remove a security vulnerability in Microsoft Windows 2000, preventing a user from gaining administrator privileges. An unchecked buffer exists in the Still Image Service' on Windows 2000 hosts. A locally logged-on user can execute malicious code that will use the still image service to escalate their permissions equal to that of the Still Image Service, namely, LocalSystem. The Still Image Service is not installed by default, but is automatically installed, via plug-n-play, when a user attaches a still image device (i.e. digital camera, scanner, etc.) to a Windows 2000 host.

Windows NT Invalid RDP Data Vulnerability Patch MS01-052 is written to be a helpful program which can remove the 'Invalid RDP Data can Cause Terminal Service Failure' vulnerability in computers running Windows 2000 and Windows NT4.0 Terminal Services Edition, discussed in Microsoft Security Bulletin MS01-052. Download now to prevent a malicious user from causing your server to fail.

Windows 2000 Indexing Service File Enumeration Vulnerability Patch (MS00-098) is launched as an important and helpful patch to remove a security vulnerability in a component that ships as part of Microsoft Windows 2000. The vulnerability could allow a malicious Web site operator to learn the names and properties of files and folders on the machine of a visiting user.

An ActiveX control that ships as part of Indexing Service is incorrectly marked as 'safe for scripting', thereby enabling it to be executed by Web site applications. The control at issue here could be used to enumerate files and folders and to view their properties. It would not be necessary for Indexing Service to be running in order for the vulnerability to be exploited; however, if it were running, the control also could be used to search for files containing specific words. The vulnerability could not be used to read files, except via a fairly unlikely scenario discussed in detail in the FAQ. It could not be used under any conditions to change, add, or delete information on the user's computer.

A patch has been provided for Indexing Service 3.0, but not for Index Server 2.0. This is primarily due to the different delivery vehicles for the two versions. Indexing Service 3.0 ships as part of all versions of Windows 2000; thus, the vulnerability could affect all Windows 2000 users. In contrast, Index Server 2.0 ships as part of the Windows NT 4.0 Option Pack; thus, to be affected by the vulnerability in Index Server 2.0, a Webmaster would need to browse untrustworthy Internet sites from a Web server, which is contrary to normal recommended practices.