CVE-2001-0335

FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters...

CVE-2001-0241

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0...

CVE-2001-0333

A directory traversal vulnerability exists in Microsoft IIS 5.0 and earlier versions. The root cause is a flaw in how the web server handles CGI filename requests. Specifically, after the initial security check, IIS mistakenly performs a second decoding pass on the CGI filename. An attacker can e...

CVE-2001-0334

Affected software: IIS FTP service on IIS 5.0 and earlier. Vulnerability: remote denial of service via a wildcard sequence that expands to a long string. Root cause: expansion of a wildcard sequence in FTP handling leads to DoS. Exploitation details are not provided in the documents. Mitigation: ...

CVE-2001-0336: Undefined Security Weakness

The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request...

CVE-2001-0004: Undefined Security Weakness

IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability...

CVE-2001-0334: Incorrect Calculation of Buffer Size

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded...

CVE-2001-0333: Undefined Security Weakness

Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. dot dot and "" characters twice...

CVE-2001-0241: Undefined Security Weakness

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0...

Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests

Overview Intruders can disrupt the normal operation of an IIS 5.0 server using a malicious Web Distributed Authoring and Versioning WebDAV request. Description WebDAV is an extension to HTTP used to manage content on web servers. Quoting from RFC 2518: WebDAV is an extension to the HTTP/1.1...

Microsoft Windows 2000 Internet Information Server (IIS) and Exchange 2000 vulnerable to DoS via malformed URL (MS01-014)

Overview A vulnerability that affects Microsoft IIS 5.0 and Exchange 2000 allows an intruder to disrupt IIS web services and web-based mail services served via an Exchange server. Description Microsoft IIS 5.0 contains a vulnerability that allows an intruder to cause a memory allocation error by...

CVE-1999-1110

The CVE-1999-1110 vulnerability concerns the Windows Media Player ActiveX control as used in Internet Explorer 5.0. The ActiveX object reportedly returns a specific error code when a referenced file does not exist, enabling remote websites to determine whether a file exists on the client. The pro...

CVE-1999-1041

CVE-1999-1041 is a local privilege escalation affecting SCO OpenServer 5.0 and SCO UNIX 3.2v4 through a buffer overflow in the mscreen program. The vulnerability can be triggered by processing an excessively long TERM environment variable and by an overly long entry in the .mscreenrc file, enabli...

CVE-1999-1046

Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181...

CVE-1999-1557

The IMail IMAP server (imapd) from Ipswitch is affected by a buffer overflow in the login functions for IMail 5.0 and earlier. An unauthenticated, remote attacker could trigger a denial of service and possibly execute arbitrary code by sending a long user name or a long password. Mitigation: upgr...

CVE-1999-1401

CVE-1999-1401 affects the Desktop searchbook program on IRIX 5.0.x through 6.2. The vulnerability involves insecure permissions on certain user files (iconbook and searchbook), as described in the initial entry. No technical details, exploit information, or remediation are provided in the connect...

CVE-1999-1370

The CVE-1999-1370 entry concerns the Internet Explorer 5.0 setup wizard (ie5setup.exe). The provided sources state that during unattended installation it disables the screen saver and the Task Scheduler Service, potentially allowing local access or disruption of security-critical program executio...

CVE-1999-1367

CVE-1999-1367 affects Internet Explorer 5.0. The issue is that the browser does not properly reset the username/password cache for sites that lack standard cache controls, allowing another user on the same system to access restricted sites visited by a prior user. Impact is partial confidentialit...

CVE-1999-1046

IMail 5.0 is affected by a buffer overflow in the IMonitor service. The flaw can be triggered by sending a long string to port 8181, enabling remote denial of service and potentially arbitrary command execution. No remediation details are provided in the supplied documents.

CVE-1999-1235: Undefined Security Weakness

Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow 1 local users to read the information from another user's index.dat, or 2 people who are physically observing "shoulder surfing" another user to read the information from the status bar...