Information Disclosure

Moodle is vulnerable to information disclosure. In the repository/webdav/lib.php form, a plain text textbox is used for the WebDAV password, allowing a malicious administrator to obtain this information through configuring an instance...

Privilege Escalation

Moodle is vulnerable to privilege escalation attacks. The attacks are possible because it does not properly handle WebDav repository privileges. Therefore, any authenticated users are able to modify, read, or delete arbitrary site-wide repositories...

VulnCheck KEV: CVE-2003-0109

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0...

Microsoft Windows 'WebDAV' Remote Code Execution Vulnerability (KB3197835)

This host is missing a critical security update according to Microsoft KB3197835. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Security Advisory 4025685: Guidance for older platforms (XP / 2003) (EXPLODINGCAN)

The remote Windows host is missing a security update. It is, therefore, affected by one or more of the following vulnerabilities : - A remote code execution vulnerability exists in how the Remote Desktop Protocol RDP handles requests if the RDP server has Smart Card authentication enabled. An...

Xxe

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

CVE-2015-7326

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

CVE-2015-7326

CVE-2015-7326 denotes an XML External Entity (XXE) vulnerability in Milton Webdav. Affected in Milton Webdav before 2.7.0.3, with concrete evidence in connected documents showing XXE injection paths via XML parsing in PROPFIND/PROPPATCH/LOCK handling where SAXParser configuration was insecure. Th...

CVE-2015-7326

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

Microsoft IIS WebDav ScStoragePathFromUrl Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow', 'Description' = %q Buffer overflow in the ScStoragePathFromUrl function in the WebDAV servic...

Microsoft IIS WebDav ScStoragePathFromUrl Overflow Exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow',...

Microsoft IIS - WebDav 'ScStoragePathFromUrl' Remote Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule ' Microsoft IIS WebDav ScStoragePathFromUrl Overflow', 'Description' = %q Buffer overflow in the ScStoragePathFromUrl function in the WebDAV servic...

Microsoft Windows Server 2003 IIS 6.0 WebDAV PROPFIND Request Handling RCE (EXPLODINGCAN)

The remote host is running Windows Server 2003 and Internet Information Services IIS 6.0 with WebDAV enabled. It is, therefore, affected by a buffer overflow condition in the IIS WebDAV service due to improper handling of the 'If' header in a PROPFIND request. An unauthenticated, remote attacker...

Microsoft Windows Server 2003 R2 IIS 6.0 WebDAV PROPFIND Request Handling RCE (EXPLODINGCAN)

The remote host is running Windows Server 2003 R2 and Internet Information Services IIS 6.0 with WebDAV enabled. It is, therefore, affected by a buffer overflow condition in the IIS WebDAV service due to improper handling of the 'If' header in a PROPFIND request. An unauthenticated, remote attack...

MS IIS 6.0 Buffer Overflow NSE Script

local nmap = require "nmap" local string = require "string" local shortport = require "shortport" local vulns = require "vulns" -- NSE Buffer Overflow vulnerability in IIS description = Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS...

CVE-2017-7269—IIS 6.0 WebDAV remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability description: 3 on 27 May, in Windows 2003 R2 using the IIS 6.0 broke a 0Day vulnerability （CVE-2017-7269, the exploit PoC began to spread, but the worst part is this product has stopped updating. Online streaming of the poc the download link below. github address: The combination of...

The vulnerability of the Internet Information Services network service package, which allows a perpetrator to execute arbitrary code

The vulnerability of the ScStoragePathFromUrl function in the WebDAV service of the Internet Information Services networking services is due to buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a long header that starts with "If: http://"...

CVE-2017-7269-IIS6 remote code execution vulnerability-reproduce-bug warning-the black bar safety net

Vulnerability description: Windows Server 2003R2 version IIS6. 0 the WebDAV service in the ScStoragePathFromUrl a function of the presence buffer overflow vulnerability, the remote attacker through to the“If: http://”at the beginning of a long header PROPFIND request, execute arbitrary code. The...

CVE-2017-7269 IIS6. 0 remote code execution vulnerability analysis and Exploit-vulnerability warning-the black bar safety net

Author: k0shl reprint please indicate the source author of the blog: http://whereisk0shl.top Preface CVE-2017-7269 IIS 6.0 in the presence of a stack overflow vulnerability in IIS6. 0 processing PROPFIND command when, due to the length of the url without the effective length of the control and...

WebDAV

Web Distributed Authoring and Versioning WebDAV is a facility that enables basic file management reading and writing to a web server. It essentially allows the webserver to be mounted by the client as a traditional file system allowing users a very simplistic means to access it as they would any...