iusr_bug.txt

Internet User Bug Security Hole -kon. I've recently found a bug in NT 4 Server w/ IIS that allows the internet user IUSRCOMPUTER to change any user's password, including the administrators, leading to total server compromise. How it's done: The attacker must have access to the NT Server's web...