Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
microsoft site server 2.0 vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-1999-0360
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Microsoft Site Server 2.0
1 EDB exploit
5
CVSSv2
CVE-1999-0910
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Microsoft Site Server 3.0
Microsoft Commercial Internet System 2.0
Microsoft Site Server Commerce 3.0
Microsoft Commercial Internet System 2.5
5
CVSSv2
CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote malicious users to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
Microsoft Site Server 3.0
Microsoft Internet Information Services 5.0
Microsoft Proxy Server 2.0
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Commercial Internet System 2.5
Microsoft Site Server Commerce 3.0
1 EDB exploit
2.6
CVSSv2
CVE-1999-0861
Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext.
Microsoft Site Server 3.0
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Commercial Internet System 2.5
Microsoft Site Server Commerce 3.0
5
CVSSv2
CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Microsoft Commercial Internet System 2.0
Microsoft Internet Information Server 4.0
Microsoft Site Server 3.0
Microsoft Commercial Internet System 2.5
1 EDB exploit
10
CVSSv2
CVE-1999-1011
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote malicious users to execute arbitrary commands.
Microsoft Site Server 3.0
Microsoft Data Access Components 2.0
Microsoft Internet Information Server 3.0
Microsoft Index Server 2.0
Microsoft Internet Information Server 4.0
Microsoft Data Access Components 1.5
Microsoft Data Access Components 2.1
2 EDB exploits
1 Article
4.3
CVSSv2
CVE-2008-1888
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote malicious users to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.
Microsoft Sharepoint Server 2.0
1 EDB exploit
7.5
CVSSv2
CVE-2001-0244
Buffer overflow in Microsoft Index Server 2.0 allows remote malicious users to execute arbitrary commands via a long search parameter.
Microsoft Index Server 2.0
5
CVSSv2
CVE-1999-0007
Information from SSL-encrypted sessions via PKCS #1.
Microsoft Site Server 3.0
Netscape Directory Server 1.3
Netscape Directory Server 3.1
Ssleay Ssleay 0.6.6
Netscape Certificate Server 1.0
C2net Stonghold Web Server 2.0.1
Netscape Enterprise Server 3.0.1b
Microsoft Internet Information Server 3.0
Netscape Enterprise Server 2.0
Ssleay Ssleay 0.9
C2net Stonghold Web Server 2.3
Netscape Messaging Server 3.54
Netscape Collabra Server 3.5.2
Netscape Directory Server 3.12
Microsoft Internet Information Server 4.0
Netscape Fasttrack Server 3.01b
Ssleay Ssleay 0.8.1
C2net Stonghold Web Server 2.2
Netscape Enterprise Server 3.5.1
Netscape Proxy Server 3.5.1
Microsoft Exchange Server 5.5
Hp Open Market Secure Webserver 2.1
6
CVSSv2
CVE-2003-0904
Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. whe...
Microsoft Sharepoint Services 2.0
Microsoft Exchange Server 2003
Microsoft Windows Server 2003 -
Microsoft Windows Server 2003
Microsoft Windows Server 2003 R2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »