192 matches found
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1707.prm...
Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method
Overview Microsoft Internet Information Server IIS servers support a HTTP method called TRACK. The HTTP TRACK method returns the contents of client HTTP requests in the entity-body of the TRACK response. This behavior could be leveraged by attackers to access sensitive information, such as cookie...
Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests
source: https://www.securityfocus.com/bid/9313/info A vulnerability has been reported to affect Microsoft IIS. It has been reported that IIS fails to log HTTP TRACK calls made to the affected server. A remote attacker may exploit this condition in order to enumerate server banners. TRACK / HTTP/1...
Microsoft IIS 5.0 < 5.1 - Remote Denial of Service
/ Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit that makes use of the vulnerability recently published by SPI dynamics Published on 31.05.2003 / include include include pragma comment lib,"ws232" void graphitte printf"\n "; printf"\n Webdav MICROSOFT IIS DoS Exploit \n";...
CVE-2002-0364
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."...
ISS Security Brief: Microsoft IIS WebDAV Remote Compromise Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 17, 2003 Microsoft IIS WebDAV Remote Compromise Vulnerability Synopsis: A serious vulnerability exists within the WebDAV component of Microsoft Internet Information Services IIS Web server. WebDAV stands for...
Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002)
NGSSoftware Insight Security Research Advisory Name: IIS 5 & 5.1 Denial Of Service Vulnerability Systems Affected: Windows 2000 and XP all service packs. Severity: Moderate Category: Denial of Service Vendor URL: http://www.mircosoft.com Author: Mark Litchfield [email protected] Date: 31st...
Microsoft IIS 5.0 - IDC Extension Cross-Site Scripting
Microsoft IIS 5.0 - IDC Extension Cross-Site Scripting source: https://www.securityfocus.com/bid/5900/info A vulnerability in Microsoft Internet Information Server IIS may make cross-site scripting attacks possible. When IIS receives a request for an .idc file, the server typically returns a 404...
Insufficient Verification of Client Certificates in IIS 5.0 pre sp3
---------------------------------------------------------------------------- ------- Sentor Torparfar Advisory 001 Title: Insufficient Verification of Client Certificates in IIS 5.0 pre sp3 Date: August 16, 2002 Author: Johan Persson [email protected]...
Microsoft IIS 4.05.0 - SMTP Service Encapsulated SMTP Address (MS99-027)
Microsoft IIS 4.05.0 - SMTP Service Encapsulated SMTP Address MS99-027 source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP...
CVE-2001-0508
Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service restart via a long, invalid WebDAV request...
Microsoft Internet Information Server (IIS) contains remote buffer overflow in chunked encoding data transfer mechanism for HTR
Overview A buffer overflow vulnerability in IIS 4.0 and 5.0 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the HTR ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to a web...
EUVD-2001-1224
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service crash via 1 creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or 2 remotely injecting the device name into ASP...
Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow (4)
Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow 4 / source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This...
CVE-2002-0149
Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names...
Buffer Overrun in Talentsoft's Web+ (3) (#NISR17042002B)
NGSSoftware Insight Security Research Advisory Name: Web+ Cookie Buffer Overflow Systems Affected: IIS and Web+ 4.6/5.0 on Windows NT/2000 Severity: High Risk Vendor URL: http://www.talentsoft.com Author: David Litchfield [email protected] Date: 17th April 2002 Advisory number: NISR17042002B...
iis.asp.overflow.txt
Windows 2000 and NT4 IIS .ASP Remote Buffer Overflow Release Date: 00/00/2002 Severity: High Remote code execution IWAMMACHINE Privilege Level Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Information Services 5.0 Description: A...
Microsoft Internet Information Server (IIS) vulnerable to heap overflow during processing of crafted ".htr" request by "ISM.DLL" ISAPI filter
Overview A buffer overflow in the HTR ISAP extension on IIS servers could permit an intruder to interrupt the normal operation of IIS or possibly execute arbitrary code with the privileges of the HTR extension. Description HTR is a server-side scripting technology for IIS which has largely been...
CVE-1999-1035
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service hang via a malformed GET request, aka the IIS "GET" vulnerability...
CVE-2000-0457
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces %20 and terminated with a .htr extension, aka the ".HTR File Fragment Reading" or "File Fragment Reading via .HTR" vulnerability...