CVE-2011-5279

CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services IIS 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n newline character in an HTTP header...

Microsoft IIS Input Validation Directory Traversal (CVE-2000-0884)

A directory traversal vulnerability has been reported in Microsoft IIS. The vulnerability is due to an input validation error in Microsoft IIS that does not properly sanitize the URI for directory traversal patterns. Successful exploitation of this vulnerability would allow the attacker to execut...

Microsoft IIS WebHits Authentication Bypass - Ver2 (CVE-2007-2815)

An authentication bypass vulnerability has been reported in Microsoft IIS. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)

A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...

Microsoft IIS Short Filename Information Disclosure

An information disclosure vulnerability has been reported in Microsoft IIS. The vulnerability is due to an error in the way Microsoft IIS handles specially crafted URLs. A remote attacker can leverage this vulnerability to view undisclosed information stored on the server...

Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730) - ver 2

A code execution vulnerability exists in Microsoft Internet Information Services IIS...

Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730)

A code execution vulnerability exists in Microsoft Internet Information Services IIS when FastCGI is enabled. Successful exploitation would allow an attacker to inject and execute arbitrary code on the target system with the security privileges of the IIS Worker process. The vulnerability is due ...

Microsoft IIS 密码信息泄露漏洞（MS12-073)

BUGTRAQ ID: 56439 CVE ID: CVE-2012-2531 Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 Microsoft IIS 7.5对操作日志使用了弱权限，没有正确限制对某些日志文件的访问，通过读取此文件，可允许本地用户获取已配置账户的用户名和密码。要利用此漏洞需要启用IIS的操作日志。 0 Microsoft IIS 7.x 临时解决方法： 如果已经启用了IIS的"Operational"日志，则在分配给应用池自定义账户之前，请禁用...

Microsoft Internet Information Services security vulnerabilities

log files information leakage, FTP STARTTLS session command injection...

Cross site scripting

Microsoft Internet Information Services IIS 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."...

Microsoft IIS FTP Service CVE-2012-2532 Remote Command Injection Vulnerability

Description Microsoft IIS is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary commands with the privileges of the application; this may disclose sensitive information...

Microsoft IIS CVE-2012-2531 Password Information Disclosure Vulnerability

Description Microsoft IIS is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. Technologies Affected Avaya Conferencing Standard Edition 6.0.1 Microsoft IIS 7.5 Microsoft Windows 7 for...

Microsoft IIS Tilde Character Information Disclosure Vulnerability (HTTP)

The Microsoft IIS Webserver is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS file enumeration vulnerability-vulnerability warning-the black bar safety net

Release date: 2012-06-30 Update date: 2012-07-03 Affected system: Microsoft IIS 7.5 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 1.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 4 2 5 1 Internet Information Services（IIS, the...

RulingSite-S system a plurality of defect and repair-vulnerability warning-the black bar safety net

A background --------------------- “IIS is aWeb serverapplication and a set of Created by Microsoft for use with Microsoft Windows the function Expansion Module. IIS is the third most popular server in the world.“ （Wikipedia） the. Overview --------------------- Vulnerability research team...

Microsoft IIS 短文件名/目录名 枚举漏洞

No description provided by source. encoding=gbk An IIS shortname scanner myatlijiejie.com http://www.lijiejie.com import sys import httplib import urlparse import string import threading import Queue import time import string class Scanner: def initself, target: self.target = target self.scheme,...

Microsoft IIS FTP Connection Status Request Denial of Service Vulnerability

This host is missing important security update according to Microsoft Bulletin MS02-018. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS FTP Server 'Malformed FTP List Request' DOS Vulnerability

This host is missing important security update according to Microsoft Bulletin MS99-033. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS - Short FileFolder Name Disclosure

Microsoft IIS - Short FileFolder Name Disclosure PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19525.zip Paper: http://www.exploit-db.com/docs/19527.pdf Security Research - IIS Short File/Folder Name Disclosure Website : http://soroush.secproject.com/blog...