CVE-2001-0544

IIS 5.0 allows local users to cause a denial of service hang via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table...

CVE-2001-0680

Technical details specific to CVE-2001-0680 (affected product/version/root cause/patch) are not provided in the connected documents. Monitor for updates from trusted sources for any vendor-specific information or fixed disclosures.

CVE-2001-0507

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability...

CVE-2001-0506

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...

CVE-2001-0544

CVE-2001-0544 affects IIS 5.0. A crafted invalid MIME Content-Type header can cause a denial of service by corrupting the File Type table. Local user access, no authentication required, partial availability impact. Connected docs mention related MS01-044 references; no patch/fix details are provi...

CVE-1999-1333

CVE-1999-1333 affects ncftp 2.4.2 and earlier on Red Hat Linux 5.0 and earlier. The automatic download option can be abused by remote attackers to execute arbitrary commands via shell metacharacters in the names of files to be downloaded. The provided documents do not specify a remediation versio...

CVE-1999-1047

Gauntlet 5.0 BSDI: When patches are installed in a particular order, the system allows remote attackers to bypass firewall access restrictions and prevents logging of those activities. Affected component: Gauntlet firewall on BSDI with specific patch ordering. Root cause described as the patch se...

CVE-2000-0457

Summary: CVE-2000-0457 affects Microsoft IIS 4.0/5.0 via ISM.DLL, enabling remote disclosure of file contents by requesting a file and appending spaces and ".HTR" (the File Fragment Reading vulnerability). Affected component: ISM.DLL in IIS 4.0/5.0 handling .HTR requests. Impact: partial confiden...

CVE-2001-0507

CVE-2001-0507 describes a privilege-elevation flaw in IIS 5.0 where local users can gain privileges by abusing relative path resolution to system files used to run in-process Trojan horse files. OpenVAS/NVD entries corroborate an IIS remote/content-exploitation lineage around early MS01-044 era; ...

CVE-1999-1209

CVE-1999-1209 describes a local privilege escalation in the “scoterm” component of SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0. The vulnerability allows local users to gain root privileges. The Initial Description does not provide concrete details on vulnerable files, exact root cause...

CVE-2001-1510

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server JWS, and possibly other web servers allows remote attackers to read arbitrary files and directories by appending 1 "%3f.jsp", 2 "?.jsp" or 3 "?" to the requested URL...

Microsoft IIS 5.0 - False Content-Length Field Denial of Service

Microsoft IIS 5.0 - False Content-Length Field Denial of Service source: https://www.securityfocus.com/bid/3667/info Microsoft IIS 5.0 may be prone to a denial of service condition when sent a specially crafted malformed HTTP GET header. If an IIS 5.0 web server is sent a crafted HTTP GET request...

CVE-2001-0807

The provided records indicate CVE-2001-0807 affects Internet Explorer 5.0 (and possibly other versions). The vulnerability allows a remote attacker from a malicious web page to read known text files from a client’s hard drive by using a SCRIPT tag with a SRC attribute that points to the local tex...

CVE-2001-0508

Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service restart via a long, invalid WebDAV request...

CVE-2001-0241

CVE-2001-0241 affects the IIS 5.0 ISAPI Internet Printing Protocol extension (.printer) on Windows 2000. A buffer overflow in the Host: field of HTTP Printer requests allows remote code execution with the web server’s privileges. The provided documents describe an unchecked buffer in the ISAPI .p...

CVE-2001-0004

This CVE concerns IIS 4.0/5.0 where an attacker can cause the server to disclose file contents by sending a crafted GET request that appends %3F+.htr, causing the target file to be parsed as an .HTR ISAPI extension. Impact: unauthenticated remote disclosure of potentially sensitive files within t...

CVE-2001-0335

The CVE-2001-0335 issue affects Microsoft IIS FTP Service on IIS 5.0 and earlier. The vulnerability arises when a remote user supplies a username preceded by a special sequence of characters, causing the FTP service to enumerate Guest accounts in trusted domains. This could enable account discove...

CVE-2001-0241

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0...

CVE-2001-0336

The CVE-2001-0336 entry concerns Microsoft IIS 5.0 and earlier. According to provided records, the MS00-060 patch for IIS 5.0/earlier introduces an error that allows an attacker to cause a denial of service via a malformed request. The connected sources confirm the affected product version and th...

CVE-2001-0334

Affected software: IIS FTP service on IIS 5.0 and earlier. Vulnerability: remote denial of service via a wildcard sequence that expands to a long string. Root cause: expansion of a wildcard sequence in FTP handling leads to DoS. Exploitation details are not provided in the documents. Mitigation: ...