PT-2010-5205

Name of the Vulnerable Software and Affected Versions Microsoft FTP Service versions 7.0 through 7.5 for Internet Information Services IIS 7.0 and 7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FTP command. This is due to a...

Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability

The host is running Microsoft IIS Webserver and is prone to stack based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbmsiisbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft IIS ASP Stack Based Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 201...

CVE-2010-2730

Buffer overflow in Microsoft Internet Information Services IIS 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."...

EUVD-2010-2734

Buffer overflow in Microsoft Internet Information Services IIS 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."...

PT-2010-4249

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services IIS version 7.5 Description A buffer overflow issue exists in Microsoft Internet Information Services IIS 7.5 when FastCGI is enabled. This allows remote attackers to execute arbitrary code via crafted...

Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)

This host is missing a critical security update according to Microsoft Bulletin MS10-065. OpenVAS Vulnerability Test $Id: secpodms10-065.nasl 6605 2017-07-07 11:22:07Z cfischer $ Microsoft Internet Information Services Remote Code Execution Vulnerabilities 2267960 Authors: Sooraj KS Copyright:...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)

The version of IIS installed on the remote host has the following vulnerabilities : - Sending a specially crafted request for an ASP page on a website hosted by IIS can result in a denial of service. CVE-2010-1899 - Sending a specially crafted HTTP request to an IIS server with FastCGI enabled ca...

MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010

None None...

Microsoft to Patch 13 Security Holes in Windows, Office

Microsoft’s September batch of security patches will include fixes for 13 documented vulnerabilities affecting Windows, Internet Information Services IIS, and Microsoft Office. According to the company’s advance notification for this month’s Patch Tuesday, there will be a total of 9 bulletins fou...

PT-2010-3509 · Microsoft · Iis +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions SP2 and R2 Microsoft Windows 7 affected versions not specified Description...

RSA Authentication Agent for Web Buffer Overflow (CVE-2005-1471)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

PT-2010-2961 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: Microsoft IIS versions 6.0 through 7.5 Description: The issue allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption. Recommendations: For Microsoft IIS...

TLS: MITM attacks via session renegotiation

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...

CVE-2003-1582

Microsoft Internet Information Services IIS 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inver...

Zenoss Multiple Admin CSRF

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2010-002 - Zenoss Multiple Admin CSRF Application: Zenoss 2.3.3 Vendor: Zenoss Vendor website: http://www.zenoss.com Author: Adam Baldwin [email protected] I. BACKGROUND Zenoss is a commercial and open source system...

Zenoss 2.3.3 Cross Site Request Forgery

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2010-002 - Zenoss Multiple Admin CSRF Application: Zenoss 2.3.3 Vendor: Zenoss Vendor website: http://www.zenoss.com Author: Adam Baldwin [email protected] I. BACKGROUND Zenoss is a commercial and open source system...

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS (Windows)

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS Windows ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte...

Microsoft IIS ASP Multiple Extensions Security Bypass 5.x/6.x

Exploit for unknown platform in category remote exploits ============================================================= Microsoft IIS ASP Multiple Extensions Security Bypass 5.x/6.x ============================================================= !/usr/bin/python Exploit Title: Exploit for Microsoft...

Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug)

Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...