CVE-2001-0506

CVE-2001-0506 is a buffer overflow in IIS 4.0/5.0 ssinc.dll when processing Server-Side Includes directives, allowing an attacker who can write to the web directory to trigger overflow and execute arbitrary code with the web server’s privileges (LOCAL SYSTEM). Affected products: Microsoft IIS 4.0...