Searching iis fix software vulnerabilities


IIS 2.0 and 3.0 allows remote attackers to read


IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.


Denial of service in Windows NT IIS server usin


Denial of service in Windows NT IIS server using ..\..


In IIS, an attacker could determine a real path


In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe) .


IIS has the #exec function enabled for Server S


IIS has the #exec function enabled for Server Side Include (SSI) files.


The showcode.asp sample file in IIS and Site Se


The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.


The viewcode.asp sample file in IIS and Site Se


The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.


The code.asp sample file in IIS and Site Server


The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.


The codebrws.asp sample file in IIS and Site Se


The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.


Buffer overflow in fpcount.exe in IIS 4.0 with


Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.


The Winmsdp.exe sample file in IIS 4.0 and Site


The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.


When IIS 2 or 3 is upgraded to IIS 4, ism.dll i


When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.


IIS 4.0 allows a remote attacker to obtain the


IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions.


IIS allows local users to cause a denial of ser


IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.


Sample Internet Data Query (IDQ) scripts in IIS


Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.


Microsoft Internet Information Server (IIS) 4.0


Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.


Buffer overflow in jrun.dll in ColdFusion MX, w


Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.


IBM WebSphere Application Server 5.0.2 (or any


IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.


Unspecified vulnerability in E-Xoopport before


Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix."


Unspecified vulnerability in the IIS connector


Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.


Unspecified vulnerability in ReactOS 0.3.1 has


Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures.


Software vulnerabilities results 1 to 20 of 168     
Page: 12345...9