building broadband service manager vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows remote malicious users to inject arbitrary web script or HTML via the msg parameter.

Cisco Building Broadband Service Manager 5.3

7.5

CVSSv2

Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows malicious users to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerE...

Microsoft Windows 2000 Microsoft Windows Nt 4.0 Microsoft Windows Xp

2 EDB exploits

7.5

CVSSv2

Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows malicious users to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

5

CVSSv2

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote malicious users to cause a denial of service (crash) when t...

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

5

CVSSv2

The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.

Microsoft Internet Information Services 5.0 Microsoft Internet Information Server 4.0

7.5

CVSSv2

Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to embed scripts into another user's session.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows malicious users to cause a denial of service or execute arbitrary code.

Microsoft Internet Information Services 5.0 Microsoft Internet Information Server 4.0

4 EDB exploits

7.5

CVSSv2

Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote malicious users to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

7.5

CVSSv2

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to execute arbitrary script as other users via an HTTP error page.

Microsoft Internet Information Server 4.0 Microsoft Internet Information Services 5.0

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook