Microsoft IIS 4.0 - Pickup Directory Denial of Service

Microsoft IIS 4.0 - Pickup Directory Denial of Service source: https://www.securityfocus.com/bid/1819/info An email with a filename consisting of over 86 characters and an extension of .txt.eml will cause Microsoft IIS to crash if placed in the \mailroot\pickup directory. The process inetinfo.exe...

Microsoft IIS idq.dll Traversal Arbitrary File Access

There is a vulnerability in idq.dll which allows any remote user to read any file on the target system through the 'query.idq' parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10115; scriptversion"1.38";...

Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 - Directory Traversal (MS00-006)

source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the physical path and filename of the requested file, and the ACL for the file mus...

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal (MS00-006)

Microsoft IIS 3.04.0 Microsoft Index Server 2.0 - Directory Traversal MS00-006 source: https://www.securityfocus.com/bid/968/info A vulnerability in idq.dll can allow an attacker to gain read access to any file on the same logical drive as the web server virtual root. The attacker has to know the...

Microsoft IIS Malformed HTTP Request Header Remote DoS

It was possible to crash the remote web server by sending a malformed header request. This flaw allows an attacker to shut down your web server, thus preventing legitimate users from connecting to your web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

iis-ftp-exploit-DoS.txt

Date: Sun, 24 Jan 1999 07:56:09 -0800 From: Marc To: [email protected] Subject: Advisory: IIS FTP Exploit/DoS Attack eEye Digital Security Team www.eEye.com [email protected] Sunday, January 24, 1999 Advisory: IIS Remote FTP Exploit/DoS Attack Systems Tested: Windows NT 4.0 SP4 IIS 3.0 / 4.0 Windo...

ms.iis4.showcode.txt

L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: May 7th, 1999 Application: Microsoft IIS 4.0 Web Server Severity: Web users can view ASP source code and other sensitive files on the web server Author: [email protected] Operating Sys: Microsoft NT...

Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service

Microsoft Commercial Internet System 2.02.5 IIS 4.0 Site Server Commerce Edition 3.0 alpha3.0 - Denial of Service Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS source: https://www.securityfocus.com/bid/579/in...

Microsoft IIS / Site Server showcode.asp source Parameter Traversal Arbitrary File Access

Internet Information Server IIS 4.0 ships with a set of sample files to help web developers learn about Active Server Pages ASP. One of these sample files, 'showcode.asp' installed in /msadc/Samples/SELECTOR/, is designed to view the source code of the sample applications via a web browser. The...

Microsoft IIS 3.0/4.0 - Double Byte Code Page

source: https://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works is as follows: IIS checks the extension of t...

Microsoft IIS query.asp Direct Request Remote DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/query.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds the default script timeout if the defaul...

Microsoft IIS search.asp Direct Request DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/search.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds the default script timeout if the defau...

Microsoft IIS Traversal GET Request Remote DoS

It is possible to crash IIS by sending the request GET ../../' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10117; scriptversion"1.37"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/05/14";...

Microsoft IIS /scripts Directory Browsable (deprecated)

The /scripts directory is browsable. This gives an attacker valuable information about which default scripts you have installed and also whether there are any custom scripts present that may have vulnerabilities. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsabl...

Microsoft IIS advsearch.asp Direct Request Remote DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/advsearch.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds the default script timeout if the...

Microsoft IIS FTP Server NLST Command Overflow DoS

It is possible to make the IIS FTP server close all the active connections by issuing a too long NLST command, which will make the server crash. An attacker can use this flaw to prevent people from downloading data from your FTP server. C Tenable Network Security, Inc. include"compat.inc";...

Microsoft IIS ISM.DLL HTR Request Remote Overflow

The remote IIS web server is affected by a remote buffer overflow vulnerability. A malformed request for an .HTR, .STM, or .IDC file could lead to a denial of service, or possibly remote arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Modified by HD Moore The origin...

Microsoft IIS perl.exe HTTP Path Disclosure

It was possible to obtain the physical location of a virtual web directory of this host by issuing a request for a non-existent file with an IISAPI-registered extension. An attacker may use this flaw to gain more information about the remote host, and hence make more focused attacks. %NASLMINLEVE...

Microsoft IIS 4.0 - Remote Buffer Overflow (3)

Microsoft IIS 4.0 - Remote Buffer Overflow 3 // source: https://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote...

Microsoft IIS 4.0 - Remote Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacker to execute arbitrary code on the target...