Microsoft NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability - Active Check

There is a buffer overflow in the remote IIS web server. It is possible to overflow the remote Web server and execute commands as the SYSTEM user. SPDX-FileCopyrightText: 2001 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Internet Information Services (IIS) FrontPage DoS

Microsoft IIS, running Frontpage extensions, is vulnerable to a remote DoS attack usually called the SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft IIS 'bdir.htr' Default Files - Active Check

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Internet Information Services (IIS) Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. SPDX-FileCopyrightText: 2001 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft RDS / MDAC Vulnerability (MS99-025, msadcs.dll) - Active Check

The web server is probably susceptible to a common IIS vulnerability discovered by SPDX-FileCopyrightText: 2000 Roelof Temmingh Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS UNC Mapped Virtual Host Vulnerability

Your IIS webserver allows the retrieval of ASP/HTR source code. SPDX-FileCopyrightText: 2001 [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft IIS 5 '.printer' ISAPI Filter Applied - Active Check

Remote Web server supports Internet Printing Protocol. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS 5.0 WebDav Memory Leakage Vulnerability - Active Check

The WebDav extensions httpext.dll for Internet Information Server 5.0 contains a flaw that may allow a malicious user to consume all available memory on the target server by sending many requests using the LOCK method associated to a non existing filename. This concern not only IIS but the entire...

Microsoft Internet Information Services (IIS) Service Pack - 404

Ensure that the server is running the latest stable Service Pack SPDX-FileCopyrightText: 2003 SensePost SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

w3who.dll overflow and XSS

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. OpenVAS has determined that this file is installed on the remote host. The w3who.dll ISAPI may allow an attacker to execute arbitrary commands on...

IIS FrontPage DoS II

Microsoft IIS, running Frontpage extensions, is vulnerable to a remote buffer overflow attack. An attacker, exploiting this bug, may gain access to confidential data, critical business processes, and elevated privileges on the attached network. OpenVAS Vulnerability Test $Id: frontpageoverflow.na...

IIS Remote Command Execution

When IIS receives a user request to run a script, it renders the request in a decoded canonical form, then performs security checks on the decoded request. A vulnerability results because a second, superfluous decoding pass is performed after the initial security checks are completed. Thus, a...

Codebrws.asp Source Disclosure Vulnerability

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. OpenVAS Vulnerability Test $Id:...

IIS Global.asa Retrieval

This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...

IIS directory traversal

The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. OpenVAS Vulnerability Test $Id: iisdirtraversal.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS directory traversal Authors: First written...

IIS 5 .printer ISAPI filter applied

Remote Web server supports Internet Printing Protocol Description : IIS 5 has support for the Internet Printing ProtocolIPP, which is enabled in a default install. The protocol is implemented in IIS5 as an ISAPI extension. At least one security problem a buffer overflow has been found with that...

IIS 5.0 Sample App reveals physical path of web root

A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. OpenVAS Vulnerability Test $Id: iis5samplepath.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS 5.0 Sample App reveals physical path of...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. If you do not use this service, then disable it as ...

IIS IDA/IDQ Path Disclosure

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks. OpenVAS Vulnerability Test $Id:...