Page 10 of 73 results (0.004 seconds)

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table. • http://www.ciac.org/ciac/bulletins/l-132.shtml http://www.securityfocus.com/bid/3195 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 https://exchange.xforce.ibmcloud.com/vulnerabilities/6983 •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability. • https://www.exploit-db.com/exploits/21072 http://online.securityfocus.com/archive/1/205069 http://www.ciac.org/ciac/bulletins/l-132.shtml http://www.osvdb.org/5607 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 https://exchange.xforce.ibmcloud.com/vulnerabilities/6985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A909 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A912 •

CVSS: 5.0EPSS: 12%CPEs: 1EXPL: 0

Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request. • http://online.securityfocus.com/archive/1/182579 http://www.iss.net/security_center/static/6982.php http://www.osvdb.org/5606 http://www.osvdb.org/5633 http://www.securityfocus.com/bid/2690 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 •

CVSS: 7.2EPSS: 54%CPEs: 2EXPL: 2

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability. • https://www.exploit-db.com/exploits/21071 http://marc.info/?l=bugtraq&m=99802093532233&w=2 http://online.securityfocus.com/archive/1/242541 http://www.ciac.org/ciac/bulletins/l-132.shtml http://www.securityfocus.com/bid/3190 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044 https://exchange.xforce.ibmcloud.com/vulnerabilities/6984 •

CVSS: 5.0EPSS: 5%CPEs: 2EXPL: 3

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject. • https://www.exploit-db.com/exploits/20989 https://www.exploit-db.com/exploits/20991 http://www.iss.net/security_center/static/6800.php http://www.securityfocus.com/archive/1/194919 http://www.securityfocus.com/bid/2973 •