PT-2001-1143 · Microsoft · Iis

Publicado 2001-01-09 · Atualizado 2018-10-30 · CVE-2000-1104

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IIS (affected versions not specified)

Description A variant of the IIS Cross-Site Scripting issue allows a malicious web site operator to embed scripts in a link to a trusted site. These scripts are returned without quoting in an error message back to the client, which then executes them in the same context as the trusted site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-1104

Produtos afetados

Iis

Referências · 3

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1104 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1104 · Nota de Segurança