PT-2001-1560 · Microsoft · Iis

Publicado 2001-06-27 · Atualizado 2018-10-12 · CVE-2001-0335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 5.0 and earlier

Description The issue allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters in the FTP service.

Recommendations For IIS versions 5.0 and earlier, consider disabling the FTP service until a patch is available. Restrict access to the FTP service to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0335

Produtos afetados

Iis

Referências · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0335 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0335 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6545 · Nota
• http://securityfocus.com/bid/2719 · Nota