CVE-2003-0718: Undefined Security Weakness

The WebDAV Message Handler for Internet Information Services IIS 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service memory and CPU exhaustion, application crash via a PROPFIND request with an XML message containing XML elements with a large number of attributes...

Microsoft IIS 5.0 PROPFIND Remote DoS

Binary data 1703.prm...

CVE-2003-0226: Undefined Security Weakness

Microsoft Internet Information Services IIS 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a 1 PROPFIND or 2 SEARCH method, which generates an error condition that is not properly handled...

CVE-2002-0422

CVE-2002-0422 concerns Microsoft IIS 5 and 5.1. WebDAV support can leak an internal IP address. The PROPFIND method with a blank Host header can expose the address in an HREF within a 207 Multi-Status response, and the WRITE or MKCOL methods can leak the internal IP in the Location header. Connec...

CVE-2002-0422: Exposure of Sensitive Information to an Unauthorized Actor

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system which may be obscured by NAT via 1 a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or 2 via the WRITE or...

IIS 5.0 PROPFIND DOS

Georgi Guninski security advisory 38, 2001 IIS 5.0 PROPFIND DOS Systems affected: IIS 5.0 Risk: Medium but may turn more serious Date: 8 March 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or...

Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS

It was possible to disable the remote IIS server by making a specially formed PROPFIND request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This security check is heavily based on Georgi Guninski's post on the bugtraq mailing list include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2000-0869

CVE-2000-0869: The default Apache 1.3.12 configuration on SuSE Linux 6.4 enables WebDAV, allowing remote attackers to list arbitrary directories via the PROPFIND method. This results in information disclosure about directory structure. The issue is tied to the WebDAV module being active by defaul...

CVE-2000-0869: Undefined Security Weakness

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method...