The vulnerability of the Internet Information Services software allows a perpetrator to cause a service failure or execute arbitrary code.

The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. This vulnerability allows an attacker to cause a stack buffer overflow in a function that converts a path to a directory into its final form...

The vulnerability of the Internet Information Services software allows a perpetrator to cause service failures.

The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. Using this module causes exhaustion of the stack when processing a special command argument “LIST”. This occurs due to a recursive function...

GE Healthcare Centricity PACS Workstation Built-in Account Vulnerability

GE Healthcare Centricity PACS Workstation is a General Electric image archiving and transfer system workstation for the healthcare industry. GE Healthcare Centricity PACS Workstation includes built-in accounts for Administrator users with the 'CANal1' password and IIS users with the 'iis '...

Microsoft IIS Remote Code Execution Vulnerability

Microsoft IIS short for Internet Information Server, is a web server program developed by Microsoft. Microsoft IIS suffers from a remote code execution vulnerability in the HTTP protocol stack HTTP.sys, which occurs when HTTP.sys fails to properly analyze specially designed HTTP requests. The...

MS14-076: Vulnerability in Internet Information Services (IIS) Could Allow Security Feature Bypass (2982998)

The remote Windows host is affected by a security feature bypass vulnerability that can lead to a bypass of the 'IP Address and Domain Restrictions' filtering rules. Successful exploitation of this vulnerability by a remote attacker allows clients from restricted or blocked domains to gain access...

Microsoft Internet Information Services Security Feature Bypass Vulnerability (2982998)

This host is missing an important security update according to Microsoft Bulletin MS14-076. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2014-4078

The IP Security feature in Microsoft Internet Information Services IIS 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP reques...

Security feature bypass

The IP Security feature in Microsoft Internet Information Services IIS 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP reques...

November 2014 Updates

Today, as part of Update Tuesday, we released 14 security updates – four rated Critical, nine rated Important, and two rated Moderate, to address 33 Common Vulnerabilities and Exposures CVEs in Microsoft Windows, Internet Explorer IE, Office, .NET Framework, Internet Information Services IIS,...

MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014

None None...

PT-2014-5698 · Microsoft · Internet Information Services

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Services IIS versions 8.0 through 8.5 Description: The IP Security feature in Microsoft Internet Information Services IIS does not properly process wildcard allow and deny rules for domains within the "IP Addres...

Advance Notification Service for the November 2014 Security Bulletin Release

Today, we provide advance notification for the release of 16 Security Bulletins. Five of these updates are rated Critical, nine are rated as Important, and two are rated Moderate in severity. These updates are for Microsoft Windows, Internet Explorer, Office, Exchange, .NET Framework, Internet...

RSA Authentication Agent for Web 5.3 - URI Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28907/info RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input. A successful attack may aid in phishing-style attack...

CVE-2011-5279

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...

Cisco WAAS Mobile Remote Code Execution Vulnerability

Cisco Wide Area Application Services WAAS Mobile contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the Cisco WAAS Mobile server with the privileges of the Microsoft Internet Information Services IIS web server. Cisco has released software...

Cisco Unified Communications Manager (CUCM) Web Detection

The web interface for Cisco Unified Communications Manager CUCM was detected. Note: This plugin does not report anything. It only collects version information to be used downstream. C Tenable, Inc. include'compat.inc'; if description scriptid70088; scriptversion"1.9";...

Attack on FIS More Widespread Than Reported

A previously reported attack against Fidelity National Information Services FIS two years ago was actually much more widespread than initially reported according to a document released to banks from the FDIC late last month. Compounding matters, as of the FDIC’s audit FIS had not taken the...

CVE-2013-0942

CVE-2013-0942 is an XSS vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for IIS and Web for Apache. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected products and versions and state...

CVE-2012-4832

Information Services Framework ISF in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access b...

Information disclosure

Information Services Framework ISF in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for the password field on the login page, which makes it easier for remote attackers to obtain access b...