CVSS: 6.8EPSS: 10%CPEs: 2EXPL: 0CVE-2002-1181
https://notcve.org/view.php?id=CVE-2002-1181
02 Nov 2002 — Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors. Múltiples vulnerabilidades de scripting en sitios cruzados (XSS) en las páginas web de administració de Microsoft Internet Information Server (IIS) 4.0 a 5.1 permite a atacantes remotos ejecut... • http://marc.info/?l=bugtraq&m=103651224215736&w=2 •
CVSS: 9.8EPSS: 65%CPEs: 2EXPL: 0CVE-2002-0364
https://notcve.org/view.php?id=CVE-2002-0364
03 Jul 2002 — Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise." • http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html •
CVSS: 7.5EPSS: 23%CPEs: 3EXPL: 2CVE-2002-0419 – Microsoft IIS 4.0/5.0/5.1 - Authentication Method Disclosure
https://notcve.org/view.php?id=CVE-2002-0419
11 Jun 2002 — Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic authentication, which could reveal real IP addresses that were obscured by NAT, or (3) when NTLM authentication is used, the NetBIOS name of the server and its Windows NT domain are revealed in response to an Authorization request. NOTE... • https://www.exploit-db.com/exploits/21313 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 67%CPEs: 2EXPL: 0CVE-2002-0071
https://notcve.org/view.php?id=CVE-2002-0071
22 Apr 2002 — Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names. Desbordamiento de buffer la extensión ISAPI ism.dll que implementa los scripts HTR en MS Internet Information Server (IIS) 4.0 y 5.0 permite a atacantes causar una denegación de servido o ejecutar código arbitrario mediante peticiones HTR con nombres de variables largos. • http://marc.info/?l=bugtraq&m=101854087828265&w=2 •
CVSS: 7.5EPSS: 31%CPEs: 2EXPL: 0CVE-2002-0072
https://notcve.org/view.php?id=CVE-2002-0072
22 Apr 2002 — The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer. Un filtro ISAPI en las Extensiones de Servidor de Front Page y ASP.NET para Internet Information Server (IIS) 4.0, 5.0 y 5.1 no maneja adecuadamente la condición de error cuando se provee una URL lar... • http://marc.info/?l=bugtraq&m=101853851025208&w=2 •
CVSS: 7.5EPSS: 67%CPEs: 2EXPL: 0CVE-2002-0073
https://notcve.org/view.php?id=CVE-2002-0073
22 Apr 2002 — The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters. El servicio FTP en Intenet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes que han establecido una sesión FTP causar una denegación de servicio mediante una petición de estado especialmente formada. • http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html •
CVSS: 7.5EPSS: 67%CPEs: 2EXPL: 0CVE-2002-0074
https://notcve.org/view.php?id=CVE-2002-0074
22 Apr 2002 — Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session. Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting) en el fichero de Ayuda del Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos insertar código en otra sesión de usuario. • http://seclists.org/bugtraq/2002/Apr/0126.html •
CVSS: 7.5EPSS: 67%CPEs: 2EXPL: 0CVE-2002-0075
https://notcve.org/view.php?id=CVE-2002-0075
22 Apr 2002 — Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message. Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting) en Internet Information Server 4.0, 5.0 y 5.1 permite a atacantes remotos ejecutar scripts arbitrarios como otros usuarios del web mediante el mensaje de error usado en una redirección de URL. • http://marc.info/?l=bugtraq&m=101854677802990&w=2 •
CVSS: 9.8EPSS: 84%CPEs: 2EXPL: 4CVE-2002-0079 – Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow
https://notcve.org/view.php?id=CVE-2002-0079
22 Apr 2002 — Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code. Desbordamiento de buffer en el mecanismo de transferencia de codificación troceada (chunked encoding) en Active Server Pages (ASP) de Internet Information Server (IIS) 4.0 y 5.0, que permite a atacantes causar una denegación de servicio o ejecutar código arbitrario. • https://www.exploit-db.com/exploits/21369 •
CVSS: 9.1EPSS: 51%CPEs: 2EXPL: 0CVE-2002-0147
https://notcve.org/view.php?id=CVE-2002-0147
22 Apr 2002 — Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun." Desbordamiento de buffer en el mecanismo de transferencia de datos de Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos causar una denegación de servicio o ejecutar código, tambien conocido como "Variante del desbordamiento de buffer en c... • http://www.cert.org/advisories/CA-2002-09.html •