IIS 5.0 WebDav Memory Leakage

The WebDav extensions httpext.dll for Internet Information Server 5.0 contains a flaw that may allow a malicious user to consume all available memory on the target server by sending many requests using the LOCK method associated to a non existing filename. This concern not only IIS but the entire...

SQLQHit Directory Structure Disclosure

The Sample SQL Query CGI is present. The sample allows anyone to structure a certain query that would retrieve the content of directories present on the local server. OpenVAS Vulnerability Test $Id: sqlqhitinformationdisclosure.nasl 5786 2017-03-30 10:08:58Z cfi $ Description: SQLQHit Directory...

IIS 5.0 PROPFIND Vulnerability

It was possible to disable the remote IIS server by making a variation of a specially formed PROPFIND request. An attacker, exploiting this vulnerability, would be able to render the web service useless. If the server is 'business critical', the impact could be high. OpenVAS Vulnerability Test $I...

Comersus Cart Cross-Site Scripting Vulnerability

The malicious user is able to compromise the parameters to invoke a Cross-Site Scripting attack. This can be used to take advantage of the trust between a client and server allowing the malicious user to execute malicious JavaScript on the client SPDX-FileCopyrightText: 2004 Noam Rathaus Some tex...

Allaire/Macromedia JRun Directory Browsing Vulnerability (MPSB01-13) - Active Check

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. SPDX-FileCopyrightText: 2005 Felix Huber Some text descriptions might be excerpted from a referenced...

Microsoft Internet Information Services (IIS) Multiple Vulnerabilities (Q327696, MS02-062)

Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft IIS 5.0 PROPFIND DoS Vulnerability (MS01-016) - Active Check

Microsoft Internet Information Services IIS server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2001 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

w3who.dll Buffer Overflow / XSS Vulnerability - Active Check

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. The scanner has determined that this file is installed on the remote host. SPDX-FileCopyrightText: 2004 Nicolas Gregoire Some text descriptions...

Microsoft IIS .IDA ISAPI Filter Applied - Active Check

Indexing Service filter is enabled on the remote Web server. SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS FrontPage DoS Vulnerability (MS03-051) - Active Check

Microsoft IIS, running Frontpage extensions, is vulnerable to a remote buffer overflow attack. SPDX-FileCopyrightText: 2001 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Microsoft IIS 'showcode.asp' Default File Directory Traversal Vulnerability - Active Check

Internet Information Server IIS 4.0 ships with a set of sample files to help web developers learn about Active Server Pages ASP. One of this sample file is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 1999 Immo Goltz C-Plugin / Renaud Deraison Converted to NASL Some text...

Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Check for bdir.htr files

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. Specifically, the bdir.htr script allows the user to browse and create files on hard drive. As this includes critical system files, it is highly possible that the...

Microsoft IIS 'Codebrws.asp' Source Disclosure Vulnerability - Active Check

Microsoft SPDX-FileCopyrightText: 2002 Matt Moore / HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:internetinformationservices"; ifdescription...

Check for dangerous IIS default files

The file viewcode.asp is a default IIS files which can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a webserver hard drive. Example,...

IIS XSS via IDC error

This IIS Server appears to be vulnerable to a Cross Site Scripting due to an error in the handling of overlong requests on an idc file. It is possible to inject Javascript in the URL, that will appear in the resulting page. OpenVAS Vulnerability Test $Id: iisxssidc.nasl 9087 2018-03-12 17:24:24Z...

NT IIS 5.0 Malformed HTTP Printer Request Header Buffer Overflow Vulnerability

There is a buffer overflow in the remote IIS web server. It is possible to overflow the remote Web server and execute commands as the SYSTEM user. At attacker may make use of this vulnerability and use it to gain access to confidential data and/or escalate their privileges on the Web server. See...

RDS / MDAC Vulnerability (msadcs.dll) located

The web server is probably susceptible to a common IIS vulnerability discovered by 'Rain Forest Puppy'. This vulnerability enables an attacker to execute arbitrary commands on the server with Administrator Privileges. OpenVAS solely relied on the presence of the file /msadc/msadcs.dll so this mig...

Web Server Cross Site Scripting

The remote web server seems to be vulnerable to a Cross Site Scripting vulnerability XSS. The vulnerability is caused by the result being returned to the user when a non-existing file is requested e.g. the result contains script code provided in the request. This vulnerability would allow an...

ASP/ASA source using Microsoft Translate f: bug

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. OpenVAS Vulnerability Test $Id: translatef.na...