Microsoft Security Bulletin MS04-026 Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting and Spoofing Attacks (842436)

Microsoft Security Bulletin MS04-026 Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting and Spoofing Attacks 842436 Issued: August 10, 2004 Version: 1.0 Summary Who should read this document: System administrators who have servers running Microsoft® Exchange...

List of Security Fixes in Windows 2000 Service Pack 4

List of Security Fixes in Windows 2000 Service Pack 4 The information in this article applies to: Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Server SP4 SUMMARY This article describes the following security-related bugs and update...

CVE-2003-0224

Buffer overflow in ssinc.dll for Microsoft Internet Information Services IIS 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include SSI directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."...

CVE-2003-0226

Microsoft Internet Information Services IIS 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a 1 PROPFIND or 2 SEARCH method, which generates an error condition that is not properly handled...

Microsoft Internet Information Services multiple bugs

Windows Media Services DoS, Crossite scripting, local buffer overflows, DoS through WebDAV...

MS03-018: Cumulative Patch for Internet Information Services (11114)

The remote host is running a version of IIS that contains various flaws that could allow remote attackers to disable this service remotely and local attackers or remote attackers with the ability to upload arbitrary files on this server to gain SYSTEM level access on this host. C Tenable Network...

CVE-2003-0224

Buffer overflow in ssinc.dll for Microsoft Internet Information Services IIS 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include SSI directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."...

CVE-2003-0226

Microsoft Internet Information Services IIS 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a 1 PROPFIND or 2 SEARCH method, which generates an error condition that is not properly handled...

CVE-2002-1790

The SMTP service in Microsoft Internet Information Services IIS 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682...

PT-2002-2467 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: Microsoft IIS version 5.0 Description: The issue is related to an off-by-one error in the CodeBrws.asp sample script. This error allows remote attackers to view the source code for files with extensions containing one additional character aft...

Multiple Microsoft IIS Vulnerabilities

Description Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. The first vulnerability may allow an attacker to obtain elevated privileges. This vulnerability can be exploited by an attacker to load and execute applications on the vulnerable server with SYSTEM level...

DSA-180 nis - information leak

Bulletin has no description...

[SNS Advisory No.56] TSAC Web package/IIS 5.1 connect.asp Cross-site Scripting Vulnerability

---------------------------------------------------------------------- SNS Advisory No.56 TSAC Web package/IIS 5.1 connect.asp Cross-site Scripting Vulnerability Problem first discovered: Wed, 17 Apr 2002 Published: Fri, 11 Oct 2002 Reference: http://www.lac.co.jp/security/english/snsadve/56e.htm...

Security Bulletin MS02-030: Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911)

---------------------------------------------------------------------- Title: Unchecked Buffer in SQLXML Could Lead to Code Execution Q321911 Date: 12 June 2002 Software: Microsoft SQLXML Impact: Two vulnerabilities, the most serious of which could run code of attacker's choice. Max Risk:...

Buffer overflow in Microsoft IIS HTR

Buffer overflow on chunk-encoded POST request...

MS02-018: Cumulative Patch for Internet Information Services (327696)

The remote version of Windows contains multiple flaws in the Internet Information Service IIS, such as heap overflow, DoS, and XSS that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...

Security Bulletin MS02-018 : Cumulative Patch for Internet Information Services (Q319733)

Title: Cumulative Patch for Internet Information Services Q319733 Date: 10 April 2002 Software: Microsoft Internet Information Server 4.0, Microsoft Internet Information Services 5.0, Microsoft Internet Information Services 5.1 Impact: Ten new vulnerabilities, the most serious of which could enab...

Смена неменяемого пароля в Windows NT (protection bypass)

Изменить неизменяемый пароль или пароль блокированной записи можно через IIS...

Переполнение буфера в ActivePerl (buffer overflow)

Переполнение буфера в ActivePerl под IIS...

Microsoft Windows Index Server discloses sensitive configuration information via crafted request to SQLQHit.asp sample application

Overview Microsoft Windows Index Server ships with an optional sample package. A component of this package, SQLQHit.asp, can disclose sensitive information when sent crafted requests. Description The Microsoft Windows Index Server ships with optional sample files. While these files should never b...