718 matches found
Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (1)
// source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This condition affects IIS 4.0 and IIS 5.0. Exploitation of this...
Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 buffer overflow in chunked encoding transfer mechanism for ASP
Overview A buffer overflow vulnerability in IIS 4.0, 5.0, and 5.1 could allow an intruder to execute arbitrary code on an IIS server with the privileges of the ASP ISAPI extension. Description Chunked encoding is a means to transfer variable-sized units of data called chunks from a web client to ...
Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow (3)
Microsoft IIS 4.05.0 - Chunked Encoding Transfer Heap Overflow 3 // source: https://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This...
Microsoft IIS 4.05.05.1 - Authentication Method Disclosure
Microsoft IIS 4.05.05.1 - Authentication Method Disclosure source: https://www.securityfocus.com/bid/4235/info Microsoft IIS supports Basic and NTLM authentication. Reportedly, the authentication methods supported by a given IIS server can be revealed to an attacker through the inspection of...
Microsoft IIS 4.0/5.0/5.1 - Authentication Method Disclosure
source: https://www.securityfocus.com/bid/4235/info Microsoft IIS supports Basic and NTLM authentication. Reportedly, the authentication methods supported by a given IIS server can be revealed to an attacker through the inspection of returned error messages, even when anonymous access is also...
Microsoft IIS ASP Redirection Function XSS
The remote host contains an ASP.NET installation that is affected by a cross-site scripting vulnerability. An attacker can exploit this issue to execute arbitrary HTML or script code in a user's browser within the security context of the affected site. %NASLMINLEVEL 70300 C Tenable Network...
Microsoft IIS/5.0 Content-Length DoS (proved)
Well, finally I have done testing about and I have made a 1gb RAM server to get Out Of Virtual Memory and basically unusable with one script that uses the flaw exposed on the other mails. I suppose that now it's a real security bug. Thanks Ivan Hernandez...
DoS через Content-Length в Microsoft IIS
При указании большого Content-Length в HTTP-запросе сервер немедленно резервирует оперативную память. Ппутем создания нескольких незавершенных одновременных подключений можно заблокировать всю память сервера...
Microsoft IIS/5 bogus Content-length bug.
Let's say that it's a bug, not a security flaw, but probably can lead into denial of service with some tweaking. When you send a bad request to Microsoft IIS/5.0 server it gives you the error and closes the connection, like when you fail to authenticate. Well... let's take a look to a normal...
CVE-2001-1186
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection...
Microsoft IIS 5.0 - False Content-Length Field Denial of Service
source: https://www.securityfocus.com/bid/3667/info Microsoft IIS 5.0 may be prone to a denial of service condition when sent a specially crafted malformed HTTP GET header. If an IIS 5.0 web server is sent a crafted HTTP GET request which contains a falsified and excessive "Content-Length" field,...
def-2001-32
====================================================================== Defcom Labs Advisory def-2001-32 Allaire JRun directory browsing vulnerability Author: George Hedfors [email protected] Release Date: 2001-11-28 ======================================================================...
CVE-2001-0902
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...
NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability
NSFOCUS Security AdvisorySA2001-07 Topic: ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability Release DateЈє 2001-11-15 CVE CAN ID : CAN-2001-0815 BUGTRAQ ID : 3526 Affected system: ================ Activestate ActivePerl 5.6.1.629 and earlier versions - Microsoft IIS 4.0 - Microsoft IIS 5...
IRM Security Advisory: Xcache Path Disclosure Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- IRM Security Advisory No. 001 Xcache Webserver Cache Path Disclosure Vulnerability Vulnerablity Type / Importance: Information Leakage / Medium Problem discovered: Mon, 17 Sep 2001...
CVE-2001-0709
Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode...
Microsoft IIS FTP service searches all trusted domains for user accounts
Overview The Microsoft IIS FTP Service contains a vulnerability that allows remote attackers to log in using domain accounts without providing a specific domain name. Description The Microsoft IIS FTP Service allows users to establish connections using either local accounts or Windows domain...
Web Server HTTP Header Internal IP Disclosure
This may expose internal IP addresses that are usually hidden or masked behind a Network Address Translation NAT Firewall or proxy server. There is a known issue with Microsoft IIS 4.0 doing this in its default configuration. This may also affect other web servers, web applications, web proxies,...
CVE-1999-1544
The CVE-1999-1544 entry describes a buffer overflow in the FTP server of Microsoft IIS 3.0/4.0 that can be triggered by a long NLST (ls) command, leading to a denial of service. Affected component: IIS FTP server; root cause: improper handling of long NLST input. Impact: local and, in some cases,...
