Microsoft IIS Multiple .cnf File Information Disclosure

The IIS web server may allow a remote user to retrieve its installation path via GET requests to the files 'access.cnf', 'botinfs.cnf', 'bots.cnf' or 'linkinfo.cnf' in the '/vtipvt' directory. This is not the default configuration. %NASLMINLEVEL 70300 This script was written by John Lampe...

Microsoft IIS bdir.htr Arbitrary Directory Listing

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. Specifically, the 'bdir.htr' script allows the user to browser and create files on hard drive. As this includes critical system files, it is highly possible that the...

Microsoft IIS / Site Server viewcode.asp Arbitrary File Access

The file viewcode.asp is a default IIS file that can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a web server hard drive. %NASLMINLEVEL 70300 This script was writt...

Microsoft IIS Phone Book Service /pbserver/pbserver.dll Remote Overflow

The CGI /pbserver/pbserver.dll is subject to a buffer overflow attack that may allow an attacker to execute arbitrary commands on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10564; scriptversion"1.43...

[Update] NSFOCUS SA2000-07: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability

NSFOCUS Security AdvisorySA2000-07 Topic: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability Release DateЈє Nov 7th, 2000 Update DateЈє Nov 23rd, 2000 CVE Candidate Numbers: CAN-2000-0886 BUGTRAQ ID : 1912 Affected system: ================ - Microsoft IIS 4.0 - Microsoft IIS 5.0 Impact:...

Microsoft IIS 4.0 / 5.0 vulnerable to directory traversal via extended unicode in url

Overview A vulnerability exists in Microsoft IIS 4 and 5 such that an attacker visiting an IIS web site can execute arbitrary code with the privileges of the IUSRmachinename account. This vulnerability is referred to as the "Web Server Folder Directory Traversal" vulnerability. This vulnerability...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7)

!/usr/bin/perl IIS 4.0/5.0 Unicode Exploit Checks for each script that has been posted on the BugTraq Lis Shouts to bighawkthats for help, datagram, Ghost Rider, The Duke, p4, kript0n and others Since It Uses fork, you gotta keep up with whats happening. Or Just Let it run and it will log sites i...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9)

/\ Microsoft IIS 4.0/5.0 Extended UNICODE Directory Traversal Exploit proof of theory exploit cuz it's wednesday and i'm on the couch brought to you by the letter B, the number 7, optyx, and t12 optyx - t12 - greetz go out to aempirei, a gun toatin' gangstah' hustler' player motherfucker who isn'...

MS Windows IIS Unicode Remote Transversal Bug (2)

Exploit for unknown platform in category remote exploits ================================================= MS Windows IIS Unicode Remote Transversal Bug 2 ================================================= /\ Microsoft IIS 4.0/5.0 Extended UNICODE Directory Traversal Exploit proof of theory exploi...

NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability

NSFOCUS Security AdvisorySA2000-07 Topic: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability Release DateЈє Nov 7th, 2000 CVE Candidate Numbers: CAN-2000-0886 BUGTRAQ ID : 1912 Affected system: ================ - Microsoft IIS 4.0 SP6 - Microsoft IIS 5.0 Not affected system:...

Microsoft IIS 4.0 - ISAPI Buffer Overflow

Microsoft IIS 4.0 - ISAPI Buffer Overflow source: https://www.securityfocus.com/bid/1911/info The ASP ISAPI file parser does not properly execute certain malformed ASP files that contain scripts with the LANGUAGE parameter containing a buffer of over 2200 characters and have the RUNAT value set a...

Microsoft IIS 4.0/5.0 - Executable File Parsing

source: https://www.securityfocus.com/bid/1912/info When Microsoft IIS receives a valid request for an executable file, the filename is then passed onto the underlying operating system which executes the file. In the event that IIS receives a specially formed request for an executable file follow...

Microsoft IIS 4.0 - ISAPI Buffer Overflow

source: https://www.securityfocus.com/bid/1911/info The ASP ISAPI file parser does not properly execute certain malformed ASP files that contain scripts with the LANGUAGE parameter containing a buffer of over 2200 characters and have the RUNAT value set as 'server'. Depending on the data entered...

Allaire JRun 3 - Directory Disclosure

source: https://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes, pre-compiled JSP files, server side...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)

source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...

Microsoft IIS Unicode Remote Command Execution

The hotfix for the 'Webserver file request parsing' problem has not been applied. This vulnerability can allow an attacker to make the remote IIS server execute arbitrary commands. %NASLMINLEVEL 70300 Approved 22Apr01 jao replaces older version This script was first written Renaud Deraison then...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)

source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)

// source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)

// source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...

Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)

source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution for "/" and "". Unauthenticated users may access any known file in the...