Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
microsoft internet information server 4.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote malicious users to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Microsoft Site Server 3.0
Microsoft Internet Information Services 5.0
Microsoft Proxy Server 2.0
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Commercial Internet System 2.5
Microsoft Site Server Commerce 3.0
1 EDB exploit
NA
CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Site Server 3.0
Microsoft Commercial Internet System 2.5
1 EDB exploit
NA
CVE-1999-1591
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote malicious users to bypass authentication requirements, as demonstrated by connecting ...
Microsoft Visual Interdev 6.0
Microsoft Internet Information Server 4.0
NA
CVE-2000-0024
IIS does not properly canonicalize URLs, potentially allowing remote malicious users to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
Microsoft Site Server 3.0
Microsoft Internet Information Server 4.0
Microsoft Site Server Commerce 3.0
NA
CVE-2000-0025
IIS 4.0 and Site Server 3.0 allow remote malicious users to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
Microsoft Site Server 3.0
Microsoft Internet Information Server 4.0
Microsoft Site Server Commerce 3.0
NA
CVE-1999-0874
Buffer overflow in IIS 4.0 allows remote malicious users to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Microsoft Internet Information Server 4.0
Microsoft Windows Nt 4.0
Microsoft Windows Nt
Microsoft Windows 2000
5 EDB exploits
NA
CVE-1999-0861
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
Microsoft Site Server 3.0
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Commercial Internet System 2.5
Microsoft Site Server Commerce 3.0
NA
CVE-1999-1011
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote malicious users to execute arbitrary commands.
Microsoft Site Server 3.0
Microsoft Data Access Components 2.0
Microsoft Internet Information Server 3.0
Microsoft Index Server 2.0
Microsoft Internet Information Server 4.0
Microsoft Data Access Components 1.5
Microsoft Data Access Components 2.1
2 EDB exploits
1 Article
NA
CVE-2001-0336
The Microsoft MS00-060 patch for IIS 5.0 and previous versions introduces an error which allows malicious users to cause a denial of service via a malformed request.
Microsoft Internet Information Server
1 EDB exploit
NA
CVE-1999-0012
Some web servers under Microsoft Windows allow remote malicious users to bypass access restrictions for files with long file names.
Netscape Fasttrack Server 3.01
Microsoft Personal Web Server 4.0
Netscape Enterprise Server 3.0
Microsoft Internet Information Server 4.0
Netscape Fasttrack Server 2.01
Microsoft Frontpage
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-0044
client side
CVE-2021-47601
deserialization
CVE-2024-34994
encryption
CVE-2021-47609
CVE-2024-37079
CVE-2024-38608
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »