192 matches found
CVE-1999-1035
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service hang via a malformed GET request, aka the IIS "GET" vulnerability...
CVE-2000-0024
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...
CVE-1999-0349
A buffer overflow in the FTP list ls command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands...
CVE-1999-0412
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension...
CVE-1999-0191
IIS newdsn.exe CGI script allows remote users to overwrite files...
Microsoft IIS Malformed HTTP Request Header Remote DoS
It was possible to crash the remote web server by sending a malformed header request. This flaw allows an attacker to shut down your web server, thus preventing legitimate users from connecting to your web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
iis.system.isapi.txt
Date: Mon, 8 Mar 1999 11:27:48 -0500 From: Fabien Royer To: [email protected] Subject: ISAPI Extension vulnerability allows to execute code as SYSTEM There's a vulnerability in IIS and other WEB servers executing as SYSTEM that allows to execute an ISAPI extension in the security...
Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service
Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: https://www.securityfocus.com/bid/579/in...
Microsoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of Service
Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: https://www.securityfocus.com/bid/579/info Microsoft IIS and all other products that use the IIS web engine have a vulnerability whereby a flood of...
Microsoft Data Access Components (MDAC) 2.1 Microsoft IIS 3.04.0 Microsoft Index Server 2.0 Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1)
Microsoft Data Access Components MDAC 2.1 Microsoft IIS 3.04.0 Microsoft Index Server 2.0 Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS 1 source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services...
Microsoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (2)
source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services. It includes a component named RDS Remote Data Services. RDS allows remote access via the internet to database objects through IIS. Both are included i...
CVE-1999-1537
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service resource exhaustion via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the...
Microsoft IIS 3.04.0 - Double Byte Code Page
Microsoft IIS 3.04.0 - Double Byte Code Page source: https://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works...
Microsoft IIS Traversal GET Request Remote DoS
It is possible to crash IIS by sending the request GET ../../' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10117; scriptversion"1.37"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/05/14";...
Microsoft IIS ISM.DLL HTR Request Remote Overflow
The remote IIS web server is affected by a remote buffer overflow vulnerability. A malformed request for an .HTR, .STM, or .IDC file could lead to a denial of service, or possibly remote arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Modified by HD Moore The origin...
Microsoft IIS 4.0 - Remote Buffer Overflow (4)
// source: https://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacker to execute arbitrary code on the target...
Microsoft IIS 4.0 - Remote Buffer Overflow (1)
Microsoft IIS 4.0 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacke...
CVE-1999-0737
The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...