CVE-1999-0449

The CVE-1999-0449 entry applies to Microsoft IIS 4, specifically the ExAir sample site. A remote attacker can cause a denial of service (CPU consumption) by directly requesting one of three ASP scripts: advsearch.asp, query.asp, or search.asp. The connected Red Hat and CPAI advisories corroborate...

CVE-1999-0777

IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions...

iis4_remote_DoS.txt

Subject: IIS 4.0 remote DoS MS99-029 To: [email protected] Hi, I found a kind of DoS attack against IIS 4.0 on NT SP4 & SP5. I reported it to MS and they've provided HotFix for this. Problem Description ------------------- Simple play. I sent lots of "Host:aaaaa...aa" to IIS like... GET /...

Microsoft IIS Malformed HTTP Request Header Remote DoS

It was possible to crash the remote web server by sending a malformed header request. This flaw allows an attacker to shut down your web server, thus preventing legitimate users from connecting to your web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-1999-0725

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page"...

asp-server-var.passwds.txt

Date: Wed, 12 Aug 1998 19:26:27 +0800 From: VINCENT LOK Subject: obtain domain users password via asp server variable Dear all, Just noticed that with basic authentication on IIS, one can obtain password of users accessing the ASP page via the server variable AUTHPASSWORD. The line in an asp file...

ms-iis4-avoid-log.txt

Date: Fri, 22 Jan 1999 10:12:52 -0000 From: mnemonix To: [email protected] Subject: IIS 4 Request Logging Security Advisory There is are a combination of problems with IIS 4 that allows an successful HTTP request to go unlogged. Microsoft's Internet Information Server 4 allows the use of any...

iis4.0.smtp.DoS.txt

Date: Tue, 16 Feb 1999 14:03:43 -0600 From: Bug Traqqer To: [email protected] Subject: Re: IIS 4.0 SMTPSVC vs. QMAIL To all- if you find this problem happening to you there are fixes on both product sides. Qmail has provided a patch for stray line feeds. It is available through the...

iis4.0+visual-interdev.txt

Date: Mon, 18 Jan 1999 11:58:06 -0800 From: Adam Berns To: [email protected] Subject: IIS4.0 and Visual Interdev Using Visual Interdev 6.0, I can connect to an IIS 4.0 Server without being asked for any security passwords. The server is running IIS4.0, with Service Pack 4, with the...

perliis.txt

http://www.rootshell.com/ From [email protected] Sun Jul 12 17:42:29 1998 Date: Mon, 13 Jul 1998 01:31:11 +0100 From: Mnemonix To: [email protected] Subject: New Perl.exe, IIS exploit Russ Cooper of ntbugtraq seems unwilling to publish this information - perhaps it shows how to exploit th...

iis-GET-DoS.txt

Date: Mon, 21 Dec 1998 15:56:44 -0600 From: Rattle Reply-To: Bugtraq List To: [email protected] Subject: Microsoft Security Bulletin MS98-019 fwd Another IIS DoS attack? Of course! ... . Nick Levay . [email protected] . "There are two major products that come out of Berkeley: LSD and UNIX. . W...

ms.iis4.showcode.txt

L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: May 7th, 1999 Application: Microsoft IIS 4.0 Web Server Severity: Web users can view ASP source code and other sensitive files on the web server Author: [email protected] Operating Sys: Microsoft NT...

activeperl.516.dos.txt

Date: Mon, 31 May 1999 07:16:53 -0700 From: Michael Smith To: [email protected] Subject: ActiveState Security Advisory Problem -------- PerlScript and Perl-ISAPI that come with ActivePerl 516 and earlier versions, inadequately check the length of path information sent to open. Due ...

iis.system.isapi.txt

Date: Mon, 8 Mar 1999 11:27:48 -0500 From: Fabien Royer To: [email protected] Subject: ISAPI Extension vulnerability allows to execute code as SYSTEM There's a vulnerability in IIS and other WEB servers executing as SYSTEM that allows to execute an ISAPI extension in the security...

iishack.asm

; IIS 4.0 remote overflow exploit. ; c dark spyrit -- [email protected] ; ; greets & thanks to: neophyte/sacx/tree/everyone in mulysa and ; beavuh... and all the other kiwi's except ceo. ; ; credits to acp for the console stuff.. ; ; I don't want to go in too deeply on the process of exploiting buff...

iis-ftp-exploit-DoS.txt

Date: Sun, 24 Jan 1999 07:56:09 -0800 From: Marc To: [email protected] Subject: Advisory: IIS FTP Exploit/DoS Attack eEye Digital Security Team www.eEye.com [email protected] Sunday, January 24, 1999 Advisory: IIS Remote FTP Exploit/DoS Attack Systems Tested: Windows NT 4.0 SP4 IIS 3.0 / 4.0 Windo...

iis.4.0.metabase.passwd.txt

Date: Mon, 22 Feb 1999 11:26:41 +0100 From: Patrick CHAMBET To: [email protected] Subject: Alert: IIS 4.0 metabase can reveal plaintext passwords Hi all, We knew that Windows NT passwords are stored in 7 different places across the system. Here is a 8th place: the IIS 4.0 metabase. IIS 4.0 uses its...

CVE-1999-0867

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers...

Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service

Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: https://www.securityfocus.com/bid/579/in...

Microsoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of Service

Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: https://www.securityfocus.com/bid/579/info Microsoft IIS and all other products that use the IIS web engine have a vulnerability whereby a flood of...