{"schemaVersion":3,"id":"CVE-2005-4360","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to \".dll\" followed by arguments such as \"~0\" through \"~9\", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using \"/_vti_bin/.dll/*/~0\".  NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).","dates":{"published":"2005-12-20T01:00:00.000Z","modified":"2024-08-07T23:46:04.119Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:C/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.86729,"percentile":0.99744,"severity":"critical","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.86729},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.86729,"percentile":0.99744}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.86729,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.86729,"percentile":0.99744}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_FA9835784BE887E5","name":"Exploit Reference (ingehenriksen.blogspot.com)","source":"reference","url":"http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_176F36B3CA6CD08F","name":"Exploit Reference (secunia.com)","source":"reference","url":"http://secunia.com/advisories/18106","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"1376","name":"Microsoft IIS - HTTP Request Denial of Service (1)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/1376","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"windows","file":"exploits/windows/dos/1376.c","codes":["OSVDB-21805","CVE-2005-4360"]},"metasploit":null},{"id":"1377","name":"Microsoft IIS - HTTP Request Denial of Service (2)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/1377","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"windows","file":"exploits/windows/dos/1377.pl","codes":["CVE-2005-4360","OSVDB-21805"]},"metasploit":null}],"exploitCount":4,"weaknesses":[{"id":"CWE-252","name":"Unchecked Return Value","description":"The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/252.html"}],"affected":[{"vendor":"microsoft","product":"internet_information_services","name":"internet information services","label":"internet_information_services","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.1","eol":null,"hubHref":"/vendor/microsoft/internet_information_services"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html","label":"archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html","hostname":"archive.cert.uni-stuttgart.de","tags":["Vendor Advisory","X Refsource HP","Issue Tracking","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419707/100/0/threaded","label":"www.securityfocus.com/archive/1/419707/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]},{"url":"http://securityreason.com/securityalert/271","label":"securityreason.com/securityalert/271","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://securitytracker.com/alerts/2005/Dec/1015376.html","label":"securitytracker.com/alerts/2005/Dec/1015376.html","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.osvdb.org/21805","label":"www.osvdb.org/21805","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Broken Link"]},{"url":"http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html","label":"ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html","hostname":"ingehenriksen.blogspot.com","tags":["X Refsource MISC","Exploit","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2963","label":"www.vupen.com/english/advisories/2005/2963","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041","label":"docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041","hostname":"docs.microsoft.com","tags":["Vendor Advisory","X Refsource MS","Patch"]},{"url":"http://www.securityfocus.com/bid/15921","label":"www.securityfocus.com/bid/15921","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-191A.html","label":"www.us-cert.gov/cas/techalerts/TA07-191A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://secunia.com/advisories/18106","label":"secunia.com/advisories/18106","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Exploit","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2005-12-20T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T23:46:04.119Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":59,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:52:20.557Z","stale":false,"partial":false}}