PT-2001-2057 · Microsoft · Iis

Publicado 2001-11-20 · Atualizado 2018-10-30 · CVE-2001-0902

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS version 5.0

Description The issue allows remote attackers to spoof web log entries. This is achieved by sending an HTTP request that includes hex-encoded newline or form-feed characters.

Recommendations For Microsoft IIS version 5.0, update to a newer version that addresses this issue to prevent web log entry spoofing.

Correção

Identificadores relacionados

CVE-2001-0902

Produtos afetados

Iis

Referências · 6

• http://marc.info/?l=bugtraq&m=100626531103946&w=2 · Nota
• http://securityfocus.com/bid/6795 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0902 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7613 · Nota
• http://marc.info/?l=ntbugtraq&m=100627497122247&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0902 · Nota de Segurança