CVE-2000-0778

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...

CVE-2000-0631: Undefined Security Weakness

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability...

CVE-2000-0770: Undefined Security Weakness

IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability...

CVE-2000-0778: Undefined Security Weakness

IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability...

CVE-2000-0669: Undefined Security Weakness

Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data...

Дырка в IIS 5.0

Некорректная реализация WebDAV позволяет получить список директории...

Microsoft IIS 5.0 - Indexed Directory Disclosure

Microsoft IIS 5.0 - Indexed Directory Disclosure source: https://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the W...

CVE-2000-0746

The CVE-2000-0746 entry concerns a Microsoft IIS XSS vulnerability affecting IIS 4.0 and 5.0. The issue arises from improper handling of unquoted script content in links returned within error messages, allowing a malicious site to craft a link that executes scripts in the context of a trusted sit...

CVE-2000-0746: Undefined Security Weakness

Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting CSS attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those...

IIS 5.0 cross site scripting vulnerability - using .shtml files or /_vti_bin/shtml.dll

Georgi Guninski security advisory 19, 2000 IIS 5.0 cross site scripting vulnerability - using .shtml files or /vtibin/shtml.dll This advisory describes two vulnerabilites one is already fixed by Microsoft but I decided to put them together. Systems affected: IIS 5.0/Windows 2000. Exploited with...

Microsoft IIS 5.0 - Translate: f Source Disclosure (1)

Microsoft IIS 5.0 - Translate: f Source Disclosure 1 source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them...

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

Remote Denial Of Service -- NetWare 5.0 with SP 5

Remote Denial Of Service -- NetWare 5.0 with SP 5 -------------------------------------------------------------- I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After few minutes after the attack server issue a memory allocation error. 10-07-2000 12:29:53 pm: SERVER-5.0-4631...

netware50-sp5.dos.txt

Remote Denial Of Service -- NetWare 5.0 with SP 5 -------------------------------------------------------------- I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After few minutes after the attack server issue a memory allocation error. 10-07-2000 12:29:53 pm: SERVER-5.0-4631...

CVE-2000-0408

CVE-2000-0408 – Microsoft IIS Malformed File Extension DoS affects IIS 4.05 and 5.0. A remote attacker can trigger a denial of service by sending a long, complex URL that appears to contain a large number of file extensions (Mashed Extension Data in URL). Remediation is associated with Microsoft ...

CVE-2000-0304

Summary: CVE-2000-0304 affects Microsoft IIS 4.0 and 5.0 when the IISADMPWD virtual directory is installed. A malformed request to inetinfo.exe (the undelimited .HTR request) can cause a remote denial of service. What is affected: IIS 4.0 and, to a lesser extent, IIS 5.0; presence of IISADMPWD is...

CVE-2000-0463

BeOS 5.0 is affected by CVE-2000-0463. The vulnerability allows remote denial of service via fragmented TCP packets, as described in the CVE entry. The connected documents corroborate the BeOS 5.0 DoS impact but do not provide additional technical details, affected subcomponents, exploit vectors,...

CVE-2000-0463

BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets...

CVE-2000-0304: Undefined Security Weakness

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability...

CVE-2000-0439: Undefined Security Weakness

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability...