CVE-2006-0026

CVE-2006-0026 describes a buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 that is triggered by parsing crafted Active Server Pages (ASP). The underlying flaw in the ASP processing code can allow an attacker who can publish ASP pages to execute arbitrary code on ...

Microsoft Internet Information Services vulnerable to remote code execution via specially crafted ASP file

Overview Microsoft Internet Information Services IIS contains a buffer overflow vulnerability. This may allow a remote, authenticated attacker to execute arbitrary code on a vulnerable system. Description IIS IIS is a web server that comes with Microsoft Windows. ASP ASP Active Server Pages is a...

IIS Unicode Directory Traversal

Added: 07/03/2006 CVE: CVE-2000-0884 BID: 1806 OSVDB: 436 Background Microsoft IIS is a web server for Windows platforms. Problem Microsoft IIS 4.0 and 5.0 allow path validation checks to be bypassed by encoding invalid characters in Unicode. For example, a slash character is represented as %c0%a...

LeadBBS v2006 upload vulnerability research-exploit warning-the black bar safety net

POST /User/uploadFile. asp? submitflag=yes HTTP/1.1 Content-Type: multipart/form-data; boundary=@$gxgl Referer: http://webidc.vicp.net/User/uploadFile.asp?submitflag=yes Host: webidc.vicp.net Content-Length: 3 4 5 Cookie: ASPSESSIONIDQQCDQQAQ=OFNPJGMBGGBDEEOJMLGJEMMC; x86AtBD=0; x86Time=2 0 0...

CVE-2006-1394

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

CVE-2006-1394

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

Microsoft IIS .HTR ISAPI chunked encoding buffer overflow

Added: 02/17/2006 CVE: CVE-2002-0364 BID: 4855 OSVDB: 5316 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A heap overflow in IIS 4.0 and 5.0 when processing chunked encoding transfers of HTR request...

Microsoft IIS 5.0 printer ISAPI extension buffer overflow

Added: 02/08/2006 CVE: CVE-2001-0241 BID: 2674 OSVDB: 3323 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem The ISAPI extension which handles requests for file names ending in .printer is affected by ...

MS02-018 Microsoft IIS 4.0 .HTR Path Overflow

This exploits a buffer overflow in the ISAPI ISM.DLL used to process HTR scripting in IIS 4.0. This module works against Windows NT 4 Service Packs 3, 4, and 5. The server will continue to process requests until the payload being executed has exited. If you've set EXITFUNC to 'seh', the server wi...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)

Exploit for unknown platform in category dos / poc ===================================================================== MS Windows IIS Malformed HTTP Request Denial of Service Exploit cpp ===================================================================== / Name: Microsoft IIS Malformed URI Do...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)

No description provided by source. / Name: Microsoft IIS Malformed URI DoS vtibin, sharepoint Exploit File: Microsoft.IIS.Malformed.URI.DoS.vtibin,sharepoint.cpp Author: Lympex Contact: .- Mail: lympexatgmaildotcom .- Web: http://l-bytes.tk Date: 20/12/2005 Info:...

Microsoft IIS - HTTP Request Denial of Service

Microsoft IIS - HTTP Request Denial of Service / Name: Microsoft IIS Malformed URI DoS vtibin, sharepoint Exploit File: Microsoft.IIS.Malformed.URI.DoS.vtibin,sharepoint.cpp Author: Lympex Contact: .- Mail: lympexatgmaildotcom .- Web: http://l-bytes.tk Date: 20/12/2005 Info:...

httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection

source: https://www.securityfocus.com/bid/16031/info httprint is prone to multiple remote vulnerabilities. The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser. The second issue may allow remote attackers to crash an instance of the application...

httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection

httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection source: https://www.securityfocus.com/bid/16031/info httprint is prone to multiple remote vulnerabilities. The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser. The second...

Microsoft IIS - HTTP Request Denial of Service (2)

Microsoft IIS - HTTP Request Denial of Service 2 !/usr/bin/perl really bored kokanin / IIS 5.1 dos thing, Inge says to use a browser at http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html kokanin not like puny browser!!"1 I hoped Inge was a leet haxx0r ch1ck, but it's...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (c)

Exploit for unknown platform in category dos / poc =================================================================== MS Windows IIS Malformed HTTP Request Denial of Service Exploit c =================================================================== / Microsoft IIS 5.1 Remote D.o.S Exploit by...