CVE-2005-4360

2005-12-2001:03:00

CWE-252

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

AI Score

7.6

Confidence

High

EPSS

0.968

Percentile

99.7%

JSON

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to “.dll” followed by arguments such as “~0” through “~9”, which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using “/_vti_bin/.dll/*/~0”. NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).

Affected configurations

Nvd

Node

microsoftinternet_information_servicesMatch5.1

AND

microsoftwindows_xpMatch-sp2professional-

VendorProductVersionCPE
microsoftinternet_information_services5.1cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:*

Vendor	Product	Version	CPE
microsoft	internet_information_services	5.1	cpe:2.3:a:microsoft:internet_information_services:5.1:::::::*
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::-: