Microsoft Internet Information Services vulnerabilities, page 3
91 vulnerabilities
Known vulnerabilities in Microsoft Internet Information Services, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0746microsoftinternet_information_server+1
EPSS score10.09%
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.CVE-2000-0770microsoftinternet_information_server+1EPSS score15.08%
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.CVE-2000-0778microsoftinternet_information_servicesEPSS score87.28%
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.CVE-2000-0258microsoftinternet_information_server+1EPSS score19.46%
IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Characters" Vulnerability.CVE-2000-0970microsoftinternet_information_server+1EPSS score45.66%
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.CVE-2011-5279microsoftinternet_information_servicesEPSS score19.59%
CRLF injection vulnerability in the CGI implementation in Microsoft Internet Information Services (IIS) 4.x and 5.x on Windows NT and Windows 2000 allows remote attackers to modify arbitrary uppercase environment variables via a \n (newline) character in an HTTP header.CVE-2010-2730microsoftinternet_information_servicesEPSS score32.83%
Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."CVE-2010-1899microsoftinternet_information_server+1EPSS score57.23%
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."CVE-2010-3972microsoftinternet_information_servicesEPSS score94.53%
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.CVE-2017-7269microsoftinternet_information_servicesKEVEPSS score99.82%
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.CVE-1999-0450microsoftinternet_information_server+1EPSS score19.03%
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).CVE-1999-0154microsoftinternet_information_server+1EPSS score40.02%
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.CVE-1999-0281microsoftinternet_information_server+1EPSS score12.83%
Denial of service in IIS using long URLs.CVE-1999-0412microsoftinternet_information_server+1EPSS score10.24%
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.CVE-1999-0253microsoftinternet_information_server+1EPSS score7.95%
IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL.CVE-1999-0233microsoftinternet_information_servicesEPSS score16.27%
IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.CVE-2002-1180microsoftinternet_information_servicesEPSS score9.69%
A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."CVE-2002-1718microsoftinternet_information_servicesEPSS score14.94%
Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.CVE-2002-1694microsoftinternet_information_server+1EPSS score13.00%
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.CVE-2002-1182microsoftinternet_information_servicesEPSS score36.07%
IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned.