PT-2002-1473 · Microsoft · Iis

Publicado 2002-06-11 · Atualizado 2020-11-23 · CVE-2002-0419

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 4 through 5.1

Description The issue allows remote attackers to obtain potentially sensitive information, making it easier to conduct brute force attacks. This is achieved through server responses that reveal certain details. In specific configurations, the server IP address is provided as the realm for Basic authentication, potentially exposing real IP addresses hidden by NAT. Additionally, when NTLM authentication is used, the server's NetBIOS name and its Windows NT domain are revealed in response to an Authorization request.

Recommendations For IIS versions 4 through 5.1, consider configuring the server to not reveal the IP address as the realm for Basic authentication and restrict the disclosure of the NetBIOS name and Windows NT domain in NTLM authentication responses. As a temporary workaround, restrict access to the NTLM authentication mechanism until a more secure configuration can be implemented.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2002-0419

Produtos afetados

Iis

Referências · 6

• 🔥 http://securityfocus.com/bid/4235 · Exploit
• 🔥 https://exploit-db.com/exploits/21313 · Exploit
• http://iss.net/security_center/static/8382.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0419 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101535399100534&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0419 · Nota