Microsoft IIS local ASP DoS

Insertion of oversized header line via Response.AddHeader causes server to crash...

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (3)

E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU"...

Microsoft IIS 5.0 (Windows XP2000NT 4.0) - WebDAV ntdll.dll Remote Buffer Overflow (3)

Microsoft IIS 5.0 Windows XP2000NT 4.0 - WebDAV ntdll.dll Remote Buffer Overflow 3 E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds...

CVE-2002-0075

CVE-2002-0075 is a cross-site scripting vulnerability in Microsoft IIS 4.0/5.0/5.1 where an attacker could cause arbitrary script to run in a user’s browser via unsanitized content in redirect error messages. The connected OpenVAS/ISS/CERT sources confirm multiple CSS issues tied to IIS, includin...

CVE-2002-0079

The CVE-2002-0079 issue is a heap/buffer overflow in the ASP ISAPI filter of Microsoft IIS (4.0/5.0) triggered by chunked-encoded POST data in ASP pages. Public writeups (SAINT) describe remote exploitation causing crashes in dllhost.exe or arbitrary code execution on IIS 5.0, with a patch refere...

CVE-2002-0149

Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names...

CVE-2002-0147

CVE-2002-0147 describes a heap-based buffer overflow in IIS's ASP data transfer/chunked encoding, affecting IIS 4.0, 5.0 and 5.1. An attacker could cause a denial of service or execute arbitrary code on the server, with privileges depending on the affected ISAPI/ASP context (IWAM_computername or ...

CVE-2002-0071

CVE-2002-0071: Buffer overflow in the ism.dll ISAPI extension (HTR) of Microsoft IIS 4.0/5.0 allows DoS or arbitrary code execution via crafted HTR requests with long variable names. The vulnerability affects IIS 4.0, 5.0 (and 5.1 per advisories) and is addressed by Microsoft Security Bulletin MS...

CVE-2002-0148

CVE-2002-0148 is a cross-site scripting vulnerability in Microsoft Internet Information Services (IIS) 4.0, 5.0 and 5.1 that allows remote attackers to execute arbitrary script as the affected user via an HTTP error page. Connected sources confirm this CSS/XSS issue is part of a broader set of II...

CVE-2002-0364

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."...

CVE-2002-0364

CVE-2002-0364 describes a heap-based buffer overflow in IIS 4.0/5.0 when processing chunked-encoded HTR requests via the HTR ISAPI extension, allowing an attacker to execute arbitrary code with the privileges of the ISAPI process. The vulnerability stems from chunked encoding handling; impact inc...

CVE-2002-0074

CVE-2002-0074 describes a cross-site scripting vulnerability in the IIS Help Files search facility affecting Microsoft IIS 4.0, 5.0 and 5.1. The issue allows remote attackers to embed scripts into another user’s session through crafted input, as detailed in CERT/CC and various vulnerability advis...

CVE-2002-0150

CVE-2002-0150 refers to a buffer overflow in Microsoft IIS 4.0/5.0/5.1 that can be triggered by inaccurate checking of HTTP header delimiters, potentially allowing an attacker to crash the server or execute arbitrary code. The vulnerability is part of a set of issues addressed by Microsoft Securi...

CVE-2002-0149

CVE-2002-0149 concerns a buffer overflow in the IIS ASP Server-Side Include (SSI) processing when handling long file names. The issue affects Microsoft IIS 4.0, 5.0 and 5.1, and can allow a remote attacker to crash the server or potentially execute arbitrary code via crafted SSI inputs. Multiple ...

CVE-2002-0073

Summary of CVE-2002-0073 : The FTP service in Microsoft IIS 4.0, 5.0, and 5.1 is vulnerable to a denial-of-service when a currently authenticated or session-hosted FTP user issues a specially crafted status request containing glob characters. The vulnerability may cause the IIS server to crash an...

Immunity Canvas: MS03_007

Name| ms03007 ---|--- CVE| CVE-2003-0109 Exploit Pack| CANVAS Description| Microsoft IIS 5.0 WebDav Overflow Notes| CVE Name: CVE-2003-0109 VENDOR: Microsoft MSADV: MS03-007 Repeatability: Repeatable References: http://www.microsoft.com/technet/security/bulletin/MS03-007.mspx CVE Url:...

Microsoft IIS 5.0 - WebDAV Remote

Microsoft IIS 5.0 - WebDAV Remote // / IIS 5.0 WebDAV -Proof of concept- / / Bug: CAN-2003-0109 / / By Roman Medina-Heigl Hernandez / / aka RoMaNSoFt / / Madrid, 23.Mar.2003 / / ================================= / / Public release. Version 1. / / --------------------------------- / // /...

MS Windows WebDAV Remote PoC Exploit

Exploit for unknown platform in category remote exploits ==================================== MS Windows WebDAV Remote PoC Exploit ==================================== // / IIS 5.0 WebDAV -Proof of concept- / / Bug: CAN-2003-0109 / / By Roman Medina-Heigl Hernandez / / aka RoMaNSoFt / / Madrid,...

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (1)

E-DB Note: Updated Exploit https://www.exploit-db.com/exploits/22368/ source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU"...

Microsoft IIS 5.0 - WebDAV Remote

// / IIS 5.0 WebDAV -Proof of concept- / / Bug: CAN-2003-0109 / / By Roman Medina-Heigl Hernandez / / aka RoMaNSoFt / / Madrid, 23.Mar.2003 / / ================================= / / Public release. Version 1. / / --------------------------------- / // /...