ActivePerl perlIS.dll Buffer Overflow

An attacker can run arbitrary code on the remote computer. This is because the remote IIS server is running a version of ActivePerl prior to 5.6.1.630 and has the Check that file exists option disabled for the perlIS.dll. OpenVAS Vulnerability Test $Id: perlISdllbufferoverflow.nasl 8023 2017-12-0...

Allaire JRun directory browsing vulnerability

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. Under Windows NT/2000any service pack and IIS 4.0/5.0: - JRun 3.0 all editions - JRun 3.1 all editio...

IIS .IDA ISAPI filter applied

Indexing Service filter is enabled on the remote Web server. Description : The IIS server appears to have the .IDA ISAPI filter mapped. At least one remote vulnerability has been discovered for the .IDA indexing service filter. This is detailed in Microsoft Advisory MS01-033, and gives remote...

Microsoft Internet Information Services (IIS) Multiple Vulnerabilities (MS02-018) - Active Check

Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only admins who...

Microsoft IIS 'IDC error' XSS Vulnerability - Active Check

This IIS Server appears to be vulnerable to a Cross Site Scripting due to an error in the handling of overlong requests on an idc file. It is possible to inject Javascript in the URL, that will appear in the resulting page. SPDX-FileCopyrightText: 2002 Geoffroy Raimbault/Lynx Technologies Some te...

IIS 5.0 Sample App reveals physical path of web root

A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Microsoft IIS Directory Traversal Vulnerability (MS00-078) - Active Check

The remote IIS server allows anyone to execute arbitrary commands by adding a unicode representation for the slash character in the requested path. SPDX-FileCopyrightText: 2001 HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Microsoft Internet Information Services (IIS) Possible Compromise

One or more files were found on this host that indicate a possible compromise of the Microsoft Internet Information Services IIS. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft IIS '.cnf' File Leakage Vulnerability - Active Check

The IIS web server may allow remote users to read sensitive information from .cnf files. This is not the default configuration. Example, http://example.com/vtipvt%5csvcacl.cnf, access.cnf, svcacl.cnf, writeto.cnf, service.cnf, botinfs.cnf, bots.cnf, linkinfo.cnf and services.cnf...

Private IP address leaked in HTTP headers

This web server leaks a private IP address through its HTTP headers. SPDX-FileCopyrightText: 2001 Alert4Web.com, 2003 Westpoint Ltd Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ActivePerl perlIS.dll Buffer Overflow Vulnerability - Active Check

An attacker can run arbitrary code on the remote computer. This is because the remote IIS server is running a version of ActivePerl prior to 5.6.1.630 and has the Check that file exists option disabled for the perlIS.dll. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions...

JS.Scob.Trojan or Download.Ject Trojan

JS.Scob.Trojan or Download.Ject Trojan were detected. SPDX-FileCopyrightText: 2004 Jeff Adams Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced...

Microsoft IIS Remote Command Execution (MS01-026/MS01-044) - Active Check

When IIS receives a user request to run a script, it renders the request in a decoded canonical form, then performs security checks on the decoded request. SPDX-FileCopyrightText: 2001 Matt Moore / HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

IIS 5.0 Sample App vulnerable to cross-site scripting attack

The script /iissamples/sdk/asp/interaction/FormJScript.asp or FormVBScript.asp allows you to insert information into a form field and once submitted re-displays the page, printing the text you entered. This .asp doesn SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpt...

[SA17240] MailSite Express Attachment Upload Vulnerability

TITLE: MailSite Express Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA17240 VERIFY ADVISORY: http://secunia.com/advisories/17240/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MailSite 6.x http://secunia.com/product/5898/ DESCRIPTION: Soroush dalili has...

MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Microsoft IIS - SA WebAgent 5.2/5.3 Redirect Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Expl (meta)

Exploit for unknown platform in category remote exploits =================================================================== MS Windows IIS SA WebAgent 5.2/5.3 Redirect Overflow Exploit meta =================================================================== This file is part of the Metasploit...

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow (Metasploit)

Microsoft IIS - SA WebAgent 5.25.3 Redirect Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...