Published: 20/09/2001 Updated: 30/10/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Internet Information Server

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet information server 4.0
microsoft internet information services 5.0

source: wwwsecurityfocuscom/bid/3190/info A vulnerability exists in Microsoft IIS 40 and 50 that could allow a user with permission to write content to the IIS server to run any code in Local System context /* jimc - IIS Server Side Include exploit by Indigo <indig0@talk21com> 2001 Usage: jim <attacker host> <attack ...

NVD-CWE-Other http://www.securityfocus.com/bid/3190 http://online.securityfocus.com/archive/1/242541 http://www.ciac.org/ciac/bulletins/l-132.shtml http://marc.info/?l=bugtraq&m=99802093532233&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/6984 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 https://nvd.nist.gov https://www.exploit-db.com/exploits/21071/https://www.kb.cert.org/vuls/id/630531

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0506

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect