Microsoft Internet Information Services security vulnerabilities

log files information leakage, FTP STARTTLS session command injection...

MS12-073: Vulnerabilities in Microsoft IIS Could Allow Information Disclosure (2733829) (uncredentialed check)

The FTP service in the version of Microsoft IIS 7.0 or 7.5 on the remote Windows host is affected by a command injection vulnerability that could result in unauthorized information disclosure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62940; scriptversion"1.11";...

CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...

CVE-2012-2531

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

Cross site scripting

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

TinyBrowser 1.32 Upload Shell Vulnerability

Exploit for php platform in category web applications Title: TinyBrowser 1.32 Upload Shell php.jpg Vulnerability Google Dork:inurl:js/tinymce/plugins/tinybrowser/ ------------------------- Affected products: ------------------------- Vulnerable are TinyBrowser v1.42 and previous versions and all...

CVE-2012-2531

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

MS12-073: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Information Disclosure (2733829)

The FTP service in the version of IIS 7.0 or 7.5 on the remote Windows host is affected by multiple vulnerabilities that could result in unauthorized information disclosure. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62905; scriptversion"1.8"; scriptcvsdate"Date:...

CVE-2012-2532

CVE-2012-2532 affects Microsoft Internet Information Services (IIS) FTP service in IIS 7.0 and 7.5. The vulnerability arises from the FTP service processing unspecified commands before TLS negotiation, enabling remote attackers to disclose sensitive information from responses to those commands (F...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. OpenVAS Vulnerability Test $Id: secpodms12-073.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows IIS FTP Service Information Disclosure Vulnerability 2761226 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2532

Microsoft FTP Service 7.0 and 7.5 for Internet Information Services IIS processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive information by reading the replies to these commands, aka "FTP Command Injection Vulnerability."...

CVE-2012-2531

CVE-2012-2531 concerns Microsoft IIS. Public description indicates IIS 7.5 stores credentials in the Operational log with weak permissions, enabling local users to read credentials (Password Disclosure Vulnerability). Connected sources reference an IIS FTP information-disclosure issue (MS12-073) ...

Microsoft Windows IIS FTP Service Information Disclosure Vulnerability (2761226)

This host is missing a moderate security update according to Microsoft Bulletin MS12-073. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Update Includes Critical Security Update for IE 9, First Patches for Windows 8, RT

Microsoft released its monthly security updates today and put special urgency on a cumulative security update for Internet Explorer 9. Critical vulnerabilities were found in the way the browser handles objects in memory which could lead to an attacker remotely executing code. Victims would have t...

Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability

Description Microsoft IIS is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary commands with the privileges of the application; this may disclose sensitive information...

MS12-073: Vulnerabilities in Microsoft Internet Information Services (IIS) could allow information disclosure: November 13, 2012

Resolves vulnerabilities in Internet Information Services IIS that could allow information disclosure if specially crafted FTP commands are sent to the server.IntroductionMicrosoft has released security bulletin MS12-073. To view the complete security bulletin, go to one of the following Microsof...

Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability

Description Microsoft IIS is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. Technologies Affected Avaya Conferencing Standard Edition 6.0.1 Microsoft IIS 7.5 Microsoft Windows 7 for...

MS12-066: Description of the security update for SharePoint Foundation 2010 Service Pack 1: October 9, 2012

Describes the security update for SharePoint Foundation 2010 Service Pack 1 that was released on October 9, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-066. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

Microsoft IIS 5.0/6.0 FTP Server (Stack Exhaustion) Denial of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Microsoft IIS 5.0/6.0 FTP Server Stack Exhaustion Denial of Service GUI VERSION Exploit Author: D35m0nd142 Date: 03/10/2012 Vendor Homepage: http://www.iis.net/ Tested on Ubuntu 12.04 CVE: 2009-2521 Special thanks ...

XYCMS injection vulnerability 0day and fix-vulnerability warning-the black bar safety net

/common. asp? id=1 6 Injection vulnerability, there is a lot of anti-injection system, how to breakthrough and I don't say that! Table segments by default adminuser field default is admin password The default background h/admin/ Take the shell method eweb5. 5 The use of vulnerability must be with...