Microsoft IIS bdir.htr Directory Listing

Binary data 1702.prm...

Microsoft IIS 5.0 PROPFIND Remote DoS

Binary data 1703.prm...

CVE-2003-0105

CVE-2003-0105 applies to Port80 Software ServerMask (2.2 and earlier) and documents that the product does not obfuscate certain HTTP headers, enabling potential fingerprinting of IIS by observers. The CVE notes that ETag, HTTP status messages, and Allow responses can reveal the underlying web ser...

Microsoft IIS 7.0 Webserver Detection

Binary data 5127.prm...

Corsaire Security Advisory - Port80 Software ServerMask inconsistencies

-- Corsaire Security Advisory -- Title: Port80 Software ServerMask inconsistencies Date: 24.02.03 Application: Port80 Software ServerMask 2.2 and prior Environment: IIS 4 / IIS 5 / IIS 5.1 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030224-001 -- Sco...

Corsaire Security Advisory 2003-02-24.1

-- Corsaire Security Advisory -- Title: Port80 Software ServerMask inconsistencies Date: 24.02.03 Application: Port80 Software ServerMask 2.2 and prior Environment: IIS 4 / IIS 5 / IIS 5.1 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030224-001 -- Sco...

CVE-2004-0205

The CVE-2004-0205 entry corresponds to a buffer overrun in the IIS 4.0 redirect function that could allow remote code execution on affected systems. Concrete details in the connected MS04-021 bulletin indicate IIS 4.0 (Windows NT 4.0 with SP6a) is affected, while IIS 5.x/6.x are not. The vulnerab...

Microsoft Internet Information Server (IIS) 4.0 contains a buffer overflow in the redirect function

Overview There is a vulnerability in the redirect function of Microsoft's Internet Information Server IIS 4.0 that could allow an attacker to execute arbitrary code on an affected system. Description Internet Information Server IIS is a web server available for the Microsoft Windows operating...

Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerability

Description Microsoft IIS 4.0 is reported prone to a buffer overflow vulnerability when handling redirects. It is reported that an attacker may exploit this vulnerability by issuing a large request to an affected IIS Web server. An attacker may exploit this issue to execute arbitrary code in the...

MS04-021: IIS Redirection Vulnerability (credentialed check) (841373)

The remote host has a version of IIS 4.0 that could allow an attacker to take the control of the remote web server and execute arbitrary commands on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid13639; scriptversion"1.35";...

Microsoft IIS Download.Ject Trojan Detection

Download.Ject is a Trojan that infects Microsoft IIS servers. The Trojan's dropper sets it as the document footer for all pages served by IIS Web sites on the infected computer. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12287; scriptversion"$Revision: 1.11 $";...

Microsoft IIS Cookie information disclosure

The remote host is running Microsoft IIS with what appears to be a a vulnerable disclosure of cookie usage. That is, when sent a Cookie with the '=' character, Microsoft IIS will either respond with an error if actually processing the cookie via a specific asp page or disclose information of the...

MS Windows IIS 5.0 SSL Remote buffer overflow Exploit (MS04-011)

Exploit for unknown platform in category remote exploits ================================================================ MS Windows IIS 5.0 SSL Remote buffer overflow Exploit MS04-011 ================================================================ // / THCIISSLame 0.3 - IIS 5 SSL remote root...

Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)

// / THCIISSLame 0.3 - IIS 5 SSL remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by Internet Security Systems / / Reversing credits of the bug go to Halvar Flake / / / / compile with MS Visual C++ : cl THCIISSLame.c / /...

Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)

Microsoft IIS 5.0 - SSL Remote Buffer Overflow MS04-011 // / THCIISSLame 0.3 - IIS 5 SSL remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by Internet Security Systems / / Reversing credits of the bug go to Halvar Flake /...

MS Windows IIS SSL Remote Denial of Service Exploit (MS04-011)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows IIS SSL Remote Denial of Service Exploit MS04-011 ============================================================== / Microsoft SSL Remote Denial of Service MS04-011 Tested...

Microsoft IIS - SSL Remote Denial of Service (MS04-011)

/ Microsoft SSL Remote Denial of Service MS04-011 Tested succesfully against IIS 5.0 with SSL. David Barroso Berrueta dbarroso s21sec com Alfredo Andres Omella aandres s21sec com S21sec - www s21sec com / include include include include include include include include include include include...

Microsoft IIS - SSL Remote Denial of Service (MS04-011)

Microsoft IIS - SSL Remote Denial of Service MS04-011 / Microsoft SSL Remote Denial of Service MS04-011 Tested succesfully against IIS 5.0 with SSL. David Barroso Berrueta dbarroso s21sec com Alfredo Andres Omella aandres s21sec com S21sec - www s21sec com / include include include include includ...

EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

Microsoft ASN.1 Library Length Overflow Heap Corruption Release Date: February 10, 2004 Date Reported: July 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Software...

CVE-2003-0904

Microsoft Exchange 2003 and Outlook Web Access OWA, when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Servic...