iis.system.isapi.txt

Date: Mon, 8 Mar 1999 11:27:48 -0500 From: Fabien Royer To: [email protected] Subject: ISAPI Extension vulnerability allows to execute code as SYSTEM There's a vulnerability in IIS and other WEB servers executing as SYSTEM that allows to execute an ISAPI extension in the security...

CVE-1999-0861

Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext...

Microsoft IIS 2.03.04.0 - ISAPI GetExtensionVersion()

Microsoft IIS 2.03.04.0 - ISAPI GetExtensionVersion source: https://www.securityfocus.com/bid/501/info IIS and potentially other NT web servers have a vulnerability that could allow arbitrary code to be run as SYSTEM. This works because of the way the server calls the GetExtensionVersion function...

Microsoft IIS 2.0/3.0/4.0 - ISAPI GetExtensionVersion()

source: https://www.securityfocus.com/bid/501/info IIS and potentially other NT web servers have a vulnerability that could allow arbitrary code to be run as SYSTEM. This works because of the way the server calls the GetExtensionVersion function the first time an ISAPI extension is loaded. Any us...

CVE-1999-0412

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension...

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

Microsoft IIS 4 Windows NT - Remote Web-Based Administration source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy...