Microsoft IIS vulnerable to DoS via invalid request for very long WebDAV requests

Overview Intruders can disrupt the normal operation of an IIS 5.0 server using a malicious Web Distributed Authoring and Versioning WebDAV request. Description WebDAV is an extension to HTTP used to manage content on web servers. Quoting from RFC 2518: WebDAV is an extension to the HTTP/1.1...

CVE-2001-0238: Undefined Security Weakness

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

CVE-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

CVE-2001-0151

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests...

Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service

Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service source: https://www.securityfocus.com/bid/2736/info Microsoft IIS 5.0 is vulnerable to a denial of service attack. A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent...

def-2001-26: IIS WebDav Lock Method Memory Leak DoS

====================================================================== Defcom Labs Advisory def-2001-26 IIS WebDav Lock Method Memory Leak DoS Author: Peter Grьndl [email protected] Release Date: 2001-05-17 ======================================================================...

DoS против IIS (malformed WebDav request)

Длинный запрос PROPFIND приводит к 100 загрузке процессора и утечке памяти. Запрос содержащий большое число символов ':' приводит к краху сервиса...

Microsoft IIS 5.0 - WebDAV Lock Method Memory Leak Denial of Service

source: https://www.securityfocus.com/bid/2736/info Microsoft IIS 5.0 is vulnerable to a denial of service attack. A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent files via the HTTP LOCK method. This leads to a complete consumption o...

Microsoft IIS 5.0 WebDAV Malformed PROPFIND Request Remote DoS

The remote version of the IIS web server contains a bug in its implementation of the WebDAV protocol that could allow an attacker to temporarily disable this service remotely. To exploit this flaw, an attacker would require the ability to send a malformed PROPFIND request to the remote host,...

CVE-2001-0151

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests...

CVE-2001-0151

CVE-2001-0151 affects Microsoft IIS 5.0, where a remote attacker can cause a denial of service by sending malformed WebDAV/PROPFIND requests. The underlying issue is a bug in WebDAV handling that allows the server to be made unavailable, with impact described as DoS and partial availability. Publ...

CVE-2001-0151: Undefined Security Weakness

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests...

Дырка в MS DAC (Internet Publishing Provider)

Можно заставить клиента выполнить WebDAV-запрос...

Security Bulletin MS01-022

---------------------------------------------------------------------- Title: WebDAV Service Provider Can Allow Scripts to Levy Requests as User Date: 18 April 2001 Software: Microsoft Data Access Component Internet Publishing Provider Impact: Web-based script could levy WebDAV requests on the...

Security Bulletin MS01-016

---------------------------------------------------------------------- Title: Malformed WebDAV Request Can Cause IIS to Exhaust CPU Resources Date: 08 March 2001 Software: IIS 5.0 Impact: Denial of Service Bulletin: MS01-016 Microsoft encourages customers to review the Security Bulletin at:...

Microsoft IIS 5.0 - WebDAV Denial of Service

Microsoft IIS 5.0 - WebDAV Denial of Service source: https://www.securityfocus.com/bid/2453/info Microsoft IIS is subject to a denial of service condition. WebDAV contains a flaw in the handling of certain malformed requests, submitting multiple malformed WebDAV requests could cause the server to...

Microsoft IIS 5.0 - WebDAV Denial of Service

source: https://www.securityfocus.com/bid/2453/info Microsoft IIS is subject to a denial of service condition. WebDAV contains a flaw in the handling of certain malformed requests, submitting multiple malformed WebDAV requests could cause the server to stop responding. This vulnerability is also...

Microsoft IIS WebDAV Malformed PROPFIND Request Remote DoS

It was possible to disable the remote IIS server by making a specially formed PROPFIND request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This security check is heavily based on Georgi Guninski's post on the bugtraq mailing list include'deprecatednasllevel.inc'; include'compat.inc'; if...

EUVD-2000-0856

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method...

CVE-2000-0869

CVE-2000-0869: The default Apache 1.3.12 configuration on SuSE Linux 6.4 enables WebDAV, allowing remote attackers to list arbitrary directories via the PROPFIND method. This results in information disclosure about directory structure. The issue is tied to the WebDAV module being active by defaul...