PT-2000-1286 · Microsoft · Iis

Publicado 2000-05-10 · Atualizado 2018-10-30 · CVE-2000-0304

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS versions 4.0 through 5.0

Description The issue allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program. This occurs when the IISADMPWD virtual directory is installed.

Recommendations For Microsoft IIS versions 4.0 through 5.0, consider removing or restricting access to the IISADMPWD virtual directory to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0304

Produtos afetados

Iis

Referências · 5

• http://xforce.iss.net/alerts/advise52.php3 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0304 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031 · Nota
• http://securityfocus.com/bid/1191 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0304 · Nota de Segurança