2837 matches found
Microsoft IIS idq.dll Traversal Arbitrary File Access
There is a vulnerability in idq.dll which allows any remote user to read any file on the target system through the 'query.idq' parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10115; scriptversion"1.38";...
CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions...
CVE-1999-0738
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0738
CVE-1999-0738 affects the code.asp sample file in IIS and Site Server . The vulnerability allows remote attackers to read arbitrary files via this sample file’s behavior. Documented impact is partial confidentiality loss without integrity or availability impact stated, with a CVSSv2 base score of...
CVE-1999-0229
Denial of service in Windows NT IIS server using .....
CVE-1999-0253
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . dot in the URL...
CVE-1999-0739
The CVE-1999-0739 issue affects Microsoft IIS (and Site Server) where the Codebrws.asp sample file enables remote disclosure of arbitrary files in the web root. Root cause: improper handling in the codebrws.asp sample allows viewing source of files with .asp/.inc/.htm/.html extensions. Impact: re...
CVE-1999-0229
CVE-1999-0229 describes a Denial of Service targeting Windows NT Internet Information Services (IIS) servers, through crafted requests that traverse directories (e.g., ../../). Several connected sources tie the issue to Microsoft IIS <= 2.0 and label it a GET request DoS vulnerability, implyin...
CVE-1999-0561
IIS has the exec function enabled for Server Side Include SSI files...
CVE-1999-0253
Summary: CVE-1999-0253 describes an information-disclosure flaw in IIS 3.0 with the iis-fix hotfix, where remote attackers could disclose ASP source by appending %2e in the URL. Affected product: Microsoft IIS 3.0 (with iis-fix) as documented in Red Hat, NVD/NVD-like records and Nessus entry; mul...
CVE-1999-0739
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0736
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0450
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl perl.exe...
CVE-1999-0360
CVE-1999-0360 affects MS Site Server 2.0 on IIS 4, where the web server can accept uploaded content (including ASP), enabling remote command execution. A Nessus plugin notes a specific verifiable vector: the repost.asp script allows uploading arbitrary files to /Users when misconfigured. Root cau...
CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...
CVE-1999-0450
CVE-1999-0450 describes an information disclosure vulnerability in Microsoft IIS where an attacker can determine the real/physical path of a virtual directory by requesting a non-existent URL that would be interpreted by perl.exe. The underlying issue is a path disclosure in IIS tied to Perl hand...
CVE-1999-0561
CVE-1999-0561 affects IIS where the #exec function is enabled for Server Side Include (SSI) files. The root cause is the SSI #exec handling, enabling potential command execution. Affected product: IIS; vulnerability details and exploitation status are not fully provided in the supplied documents....
CVE-2000-0071
Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...
CVE-1999-0737
CVE-1999-0737 : The IIS/Site Server sample file viewcode.asp allows remote attackers to read arbitrary files, causing information disclosure. Affected component: the viewcode.asp file on Microsoft Internet Information Services (IIS) / Site Server. Root cause: the file exposes the server’s filesys...