718 matches found
Microsoft IIS bdir.htr Directory Listing
Binary data 1702.prm...
Microsoft IIS 7.0 Webserver Detection
Binary data 5127.prm...
Microsoft Internet Information Server (IIS) 4.0 contains a buffer overflow in the redirect function
Overview There is a vulnerability in the redirect function of Microsoft's Internet Information Server IIS 4.0 that could allow an attacker to execute arbitrary code on an affected system. Description Internet Information Server IIS is a web server available for the Microsoft Windows operating...
Microsoft IIS Download.Ject Trojan Detection
Download.Ject is a Trojan that infects Microsoft IIS servers. The Trojan's dropper sets it as the document footer for all pages served by IIS Web sites on the infected computer. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12287; scriptversion"$Revision: 1.11 $";...
Microsoft IIS Cookie information disclosure
The remote host is running Microsoft IIS with what appears to be a a vulnerable disclosure of cookie usage. That is, when sent a Cookie with the '=' character, Microsoft IIS will either respond with an error if actually processing the cookie via a specific asp page or disclose information of the...
Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)
Microsoft IIS 5.0 - SSL Remote Buffer Overflow MS04-011 // / THCIISSLame 0.3 - IIS 5 SSL remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by Internet Security Systems / / Reversing credits of the bug go to Halvar Flake /...
Microsoft IIS - SSL Remote Denial of Service (MS04-011)
Microsoft IIS - SSL Remote Denial of Service MS04-011 / Microsoft SSL Remote Denial of Service MS04-011 Tested succesfully against IIS 5.0 with SSL. David Barroso Berrueta dbarroso s21sec com Alfredo Andres Omella aandres s21sec com S21sec - www s21sec com / include include include include includ...
Microsoft IIS - SSL Remote Denial of Service (MS04-011)
/ Microsoft SSL Remote Denial of Service MS04-011 Tested succesfully against IIS 5.0 with SSL. David Barroso Berrueta dbarroso s21sec com Alfredo Andres Omella aandres s21sec com S21sec - www s21sec com / include include include include include include include include include include include...
EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption
Microsoft ASN.1 Library Length Overflow Heap Corruption Release Date: February 10, 2004 Date Reported: July 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 all versions Microsoft Windows 2000 SP3 and earlier Microsoft Windows XP all versions Software...
Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests
Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests source: https://www.securityfocus.com/bid/9313/info A vulnerability has been reported to affect Microsoft IIS. It has been reported that IIS fails to log HTTP TRACK calls made to the affected server. A remote attacker may exploit this...
Microsoft IIS Authentication Method Enumeration
The remote host appears to be running a version of IIS which allows remote users to determine which authentication schemes are required for confidential web pages. That is, by requesting valid web pages with purposely invalid credentials, you can ascertain whether or not the authentication scheme...
ISS Server Sensor Denial of Service
EnterEdge has discovered a Denial of Service condition in ISS RealSecure Server Sensor 7.0. The condition is present when running ISS's RealSecure Server Sensor 7.0 on a Microsoft IIS server with SSL. By passing invalid unicode characters via ssl, the server sensor will shut down the IIS service...
Microsoft IIS Frontpage Server Extensions (FPSE) Malformed Form DoS
Microsoft IIS, running Frontpage extensions, is vulnerable to a remote denial of service attack usually called the 'malformed web submission' vulnerability. An attacker, exploiting this vulnerability, will be able to render the service unusable. If this machine serves a business-critical function...
Microsoft IIS WebDav buffer overflow
Buffer overflow in path conversion routine...
Microsoft IIS 5.0 < 5.1 - Remote Denial of Service
/ Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit that makes use of the vulnerability recently published by SPI dynamics Published on 31.05.2003 / include include include pragma comment lib,"ws232" void graphitte printf"\n "; printf"\n Webdav MICROSOFT IIS DoS Exploit \n";...
Microsoft IIS 5.0 5.1 - Remote Denial of Service
Microsoft IIS 5.0 5.1 - Remote Denial of Service / Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit that makes use of the vulnerability recently published by SPI dynamics Published on 31.05.2003 / include include include pragma comment lib,"ws232" void graphitte printf"\n ";...
MS Windows IIS 5.0 - 5.1 Remote Denial of Service Exploit
漏洞描述: Microsoft IIS 5.0Internet Infomation Server 5是Microsoft Windows 2000自带的一个网络信息服务器,其中包含HTTP服务功能。IIS5 默认提供了对WebDAV的支持,通过WebDAV可以通过HTTP向用户提供远程文件存储的服务。 WebDAV实现对部分模式的超长请求处理不正确,远程攻击者可以利用这个漏洞对IIS服务进行拒绝服务攻击。 攻击者可以使用'PROPFIND'或'SEARCH'请求方法,提交包含49,153字节的Webdav请求,IIS会由于拒绝服务而重新启动。不过IIS...
MS Windows IIS 5.0 - 5.1 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================= MS Windows IIS 5.0 - 5.1 Remote Denial of Service Exploit ========================================================= / Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit th...
NSFOCUS SA2003-05: Microsoft IIS ssinc.dll Over-long Filename Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-05 Topic: Microsoft IIS ssinc.dll Over-long Filename Buffer Overflow Vulnerability Release Date: 2003-5-30 CVE CAN ID: CAN-2003-0224 Affected system: =================== - - Microsoft IIS 5.0 Unaffected system:...
Microsoft IIS 5.0 - WebDAV PROPFIND SEARCH Method Denial of Service
Microsoft IIS 5.0 - WebDAV PROPFIND SEARCH Method Denial of Service / source: https://www.securityfocus.com/bid/7735/info Microsoft Internet Information Services has been reported vulnerable to a denial of service. When WebDAV receives excessively long requests to the 'PROPFIND' or 'SEARCH'...