Internet Information Server
by Microsoft
CVEs (154)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-0649 | 0.09 | — | 0.77 | Jul 13, 2000 | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined. | |||
| CVE-1999-1011 | 0.09 | — | 0.77 | Jul 19, 1999 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands. | |||
| CVE-1999-0874 | 0.09 | — | 0.75 | Jun 16, 1999 | Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions. | |||
| CVE-2010-1899 | 0.08 | — | 0.57 | Sep 15, 2010 | Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request… | |||
| CVE-2000-0246 | 0.08 | — | 0.79 | Mar 30, 2000 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability. | |||
| CVE-1999-0278 | 0.08 | — | 0.65 | Jun 1, 1998 | In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. | |||
| CVE-2002-1744 | 0.07 | — | 0.65 | Dec 31, 2002 | Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot). | |||
| CVE-2002-0148 | 0.07 | — | 0.61 | Apr 22, 2002 | Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page. | |||
| CVE-2002-0079 | 0.07 | — | 0.71 | Apr 22, 2002 | Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code. | |||
| CVE-2001-1243 | 0.07 | — | 0.63 | Jul 4, 2001 | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the… | |||
| CVE-2001-0151 | 0.07 | — | 0.66 | Jun 2, 2001 | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | |||
| CVE-2000-0886 | 0.07 | — | 0.67 | Dec 19, 2000 | IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability. | |||
| CVE-2000-0884 | 0.07 | — | 0.71 | Dec 19, 2000 | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability. | |||
| CVE-2000-0630 | 0.07 | — | 0.67 | Jul 17, 2000 | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability. | |||
| CVE-2000-0126 | 0.07 | — | 0.46 | Jan 26, 2000 | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. | |||
| CVE-1999-0736 | 0.07 | — | 0.45 | May 7, 1999 | The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. | |||
| CVE-1999-0191 | 0.07 | — | 0.53 | Sep 1, 1997 | IIS newdsn.exe CGI script allows remote users to overwrite files. | |||
| CVE-2007-2897 | 0.06 | — | 0.74 | May 30, 2007 | Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute… | |||
| CVE-2007-2815 | 0.06 | — | 0.72 | May 22, 2007 | The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the… | |||
| CVE-2003-0226 | 0.06 | — | 0.41 | Jun 9, 2003 | Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled. |
- CVE-2000-0649Jul 13, 2000risk 0.09cvss —epss 0.77
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
- CVE-1999-1011Jul 19, 1999risk 0.09cvss —epss 0.77
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
- CVE-1999-0874Jun 16, 1999risk 0.09cvss —epss 0.75
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
- CVE-2010-1899Sep 15, 2010risk 0.08cvss —epss 0.57
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request…
- CVE-2000-0246Mar 30, 2000risk 0.08cvss —epss 0.79
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability.
- CVE-1999-0278Jun 1, 1998risk 0.08cvss —epss 0.65
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
- CVE-2002-1744Dec 31, 2002risk 0.07cvss —epss 0.65
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
- CVE-2002-0148Apr 22, 2002risk 0.07cvss —epss 0.61
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
- CVE-2002-0079Apr 22, 2002risk 0.07cvss —epss 0.71
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
- CVE-2001-1243Jul 4, 2001risk 0.07cvss —epss 0.63
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the…
- CVE-2001-0151Jun 2, 2001risk 0.07cvss —epss 0.66
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
- CVE-2000-0886Dec 19, 2000risk 0.07cvss —epss 0.67
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
- CVE-2000-0884Dec 19, 2000risk 0.07cvss —epss 0.71
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
- CVE-2000-0630Jul 17, 2000risk 0.07cvss —epss 0.67
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
- CVE-2000-0126Jan 26, 2000risk 0.07cvss —epss 0.46
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
- CVE-1999-0736May 7, 1999risk 0.07cvss —epss 0.45
The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
- CVE-1999-0191Sep 1, 1997risk 0.07cvss —epss 0.53
IIS newdsn.exe CGI script allows remote users to overwrite files.
- CVE-2007-2897May 30, 2007risk 0.06cvss —epss 0.74
Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute…
- CVE-2007-2815May 22, 2007risk 0.06cvss —epss 0.72
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the…
- CVE-2003-0226Jun 9, 2003risk 0.06cvss —epss 0.41
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.
Page 2 of 8