6 matches found
CVE-2010-1899
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services IIS 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service daemon outage via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service...
Denial of service
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services IIS 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service daemon outage via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service...
动力文章(Powereasy)存在严重上传漏洞
动力文章采用无惧上传方式,对于上传文件的判断,只过滤了asp,aspx,asa等扩展上,忽略了cer,cdx等经过asp.dll映射过的其它扩展,以及,动力文章其upfileclass.asp对扩展的判断不严,导致asp 后面有空格,被当作合法的扩展,恶意用户可以通过构造表单,上传asp,asa等恶意扩展。 Access&SQL www.asp163.net下载最新的补丁,用最新的动力文章的upfileclass.asp和upfile.asp替换有漏洞的文件。...
asp. the dll is parsed into a system elevation of privilege-vulnerability warning-the black bar safety net
Network uploaded system to enhance the asp permissions for the system in two ways: 1. Graphical under the default site----home directory---application protection set to low,so you can put the asp permissions set for the system. But this upgrade method is very easy to be found,so the network there...
ASP.DLL Include File Buffer Overflow
======================================================================== = ASP.DLL Include File Buffer Overflow = = MS Bulletin posted: = http://www.microsoft.com/technet/security/Bulletin/MS06-034.mspx = = Affected Software: = IIS 5.0 = IIS 5.1 = IIS 6.0 = = Public disclosure on July 19, 2006...
IIS Global.asa Retrieval
This host is running the Microsoft IIS web server. This web server contains a configuration flaw that allows the retrieval of the global.asa file. This file may contain sensitive information such as database passwords, internal addresses, and web application configuration options. This...