CVE-2003-0904

Summary: CVE-2003-0904 affects Microsoft Exchange Server 2003 with Outlook Web Access (OWA) when NTLM is used. A flaw in HTTP connection reuse between front-end and back-end servers (NTLM-authenticated OWA) can cause a user to be connected to another user’s mailbox if Kerberos is disabled or fall...

CVE-2003-0904

Microsoft Exchange 2003 and Outlook Web Access OWA, when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Servic...

Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method

Overview Microsoft Internet Information Server IIS servers support a HTTP method called TRACK. The HTTP TRACK method returns the contents of client HTTP requests in the entity-body of the TRACK response. This behavior could be leveraged by attackers to access sensitive information, such as cookie...

CVE-2003-1102

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code...

CVE-2003-1342

Trend Micro Virus Control System TVCS 1.8 running with IIS allows remote attackers to cause a denial of service memory consumption in IIS via multiple URL requests for ActiveSupport.exe...

Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests

Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests source: https://www.securityfocus.com/bid/9313/info A vulnerability has been reported to affect Microsoft IIS. It has been reported that IIS fails to log HTTP TRACK calls made to the affected server. A remote attacker may exploit this...

Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests

source: https://www.securityfocus.com/bid/9313/info A vulnerability has been reported to affect Microsoft IIS. It has been reported that IIS fails to log HTTP TRACK calls made to the affected server. A remote attacker may exploit this condition in order to enumerate server banners. TRACK / HTTP/1...

Microsoft IIS 404 Response Service Pack Signature

The Patch level Service Pack of the remote IIS server appears to be lower than the current IIS service pack level. As each service pack typically contains many security patches, the server may be at risk. Note that this test makes assumptions of the remote patch level based on static return value...

Hummingbird CyberDOCS sets insecure permissions on script source code files

Overview Hummingbird CyberDOCS running on Microsoft Internet Information Services IIS sets insecure permissions on script source code files. A remote attacker could read the contents of unprotected files. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document manageme...

Microsoft IIS Authentication Method Enumeration

The remote host appears to be running a version of IIS which allows remote users to determine which authentication schemes are required for confidential web pages. That is, by requesting valid web pages with purposely invalid credentials, you can ascertain whether or not the authentication scheme...

ISS RealSecure Server Sensor DoS

IF HTTPS request with invalid Unicode characters received service will shut down IIS service...

ISS Server Sensor Denial of Service

EnterEdge has discovered a Denial of Service condition in ISS RealSecure Server Sensor 7.0. The condition is present when running ISS's RealSecure Server Sensor 7.0 on a Microsoft IIS server with SSL. By passing invalid unicode characters via ssl, the server sensor will shut down the IIS service...

CVE-2003-0702

Vulnerability CVE-2003-0702 affects ISS Server Sensor 7.0 XPU (versions 20.16, 20.18; likely other versions before 20.19) in conjunction with Microsoft IIS over SSL. Affects a specific ISAPI plugin that, when accessed via a certain URL, can cause a denial of service (crash) and potentially allow ...

IIS Shield DoS

Specific HTTP request causes DoS...

Immunity Canvas: MS03_022

Name| ms03022 ---|--- CVE| CVE-2003-0349 Exploit Pack| CANVAS Description| IIS 5.0 Windows Media Services ISAPI nsisslog.dll Overflow Notes| CVE Name: CVE-2003-0349 VENDOR: Microsoft MSADV: MS03-022 VersionsAffected: Repeatability: Repeatable References:...

IIS 6.0 Web Admin Multiple vulnerabilities

Hi, last week I installed Windows 2003 for the first time Enterprise edition and Web Server edition. My first objective was to check the security in the IIS 6.0 and of course my target was the Web Admin interfacethat comes with a lot of ASP's to play with ;- Some flaws were detected, the vendor h...

MS IIS web administration multiple bugs

Crossite scripting, unauthorized access to few configuration pages...

Microsoft IIS Frontpage Server Extensions (FPSE) Malformed Form DoS

Microsoft IIS, running Frontpage extensions, is vulnerable to a remote denial of service attack usually called the 'malformed web submission' vulnerability. An attacker, exploiting this vulnerability, will be able to render the service unusable. If this machine serves a business-critical function...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

Microsoft IIS 5.0 - WebDAV Remote Code Execution 3 xwdav / IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9...

Microsoft IIS 5.0 - WebDAV Remote Code Execution (3) (xwdav)

/ IIS 5.0 WebDAV Exploit Xnuxer Lab By Schizoprenic, Copyright c 2003 WebDAV exploit without netcat or telnet and with pretty magic number as RET / include include include include include include include include include define RET 0xc9c9 define LOADLIBRARYA 0x0100107c define GETPROCADDRESS...