Product:

Internet_information_services

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 90
Date Id Summary Products Score Patch Annotated
2001-09-20 CVE-2001-0507 IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability. Internet_information_services N/A
2001-09-20 CVE-2001-0506 Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability. Internet_information_server, Internet_information_services N/A
2001-06-02 CVE-2001-0151 IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. Internet_information_services N/A
2001-02-12 CVE-2001-0096 FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability. Internet_information_server, Internet_information_services N/A
2001-02-12 CVE-2001-0004 IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability. Internet_information_server, Internet_information_services N/A
2001-01-09 CVE-2000-1104 Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site. Internet_information_server, Internet_information_services N/A
2000-12-19 CVE-2000-0970 IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability. Internet_information_server, Internet_information_services N/A
2000-12-19 CVE-2000-0951 A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search. Internet_information_services N/A
2000-12-19 CVE-2000-0886 IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. Internet_information_server, Internet_information_services N/A
2000-12-19 CVE-2000-0884 IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. Internet_information_server, Internet_information_services N/A