microsoft internet information server 4.0 vulnerabilities and exploits

(subscribe to this query)

In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0 Microsoft Windows Nt 4.0

1 EDB exploit

Directory traversal vulnerability in IIS 5.0 and previous versions allows remote malicious users to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.

Microsoft Internet Information Server Microsoft Internet Information Server 4.0

9 EDB exploits

The Sun HotSpot Performance Engine VM allows a remote malicious user to cause a denial of service on any server running HotSpot via a URL that includes the [ character.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote malicious users to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform...

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote malicious users to cause a denial of service via a long NLST (ls) command.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote malicious users to read files via a .. (dot dot) attack.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

1 EDB exploit

A buffer overflow in the FTP list (ls) command in IIS allows remote malicious users to conduct a denial of service and, in some cases, execute arbitrary commands.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

Frontpage Server Extensions allows remote malicious users to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

3 Github repositories

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote malicious user to view the source code of certain files, a.k.a. "Double Byte Code Page".

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

1 EDB exploit

IIS 3.0 and 4.0 on x86 and Alpha allows remote malicious users to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.

Microsoft Internet Information Server 3.0 Microsoft Internet Information Server 4.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook