PT-2005-3564 · Microsoft · Iis

Inge Eivind Henriksen · Publicado 2005-08-23 · Atualizado 2020-11-23 · CVE-2005-2678

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft IIS versions 5.1 through 6

Description The issue allows remote attackers to spoof the SERVER NAME variable, bypassing security checks and enabling various attacks. This is achieved through a GET request with an http://localhost URI, making the request appear as if it is coming from localhost.

Recommendations For Microsoft IIS versions 5.1 through 6, consider restricting access to the SERVER NAME variable to minimize the risk of exploitation. As a temporary workaround, avoid using the SERVER NAME variable in security checks until a patch is available.

Correção

Identificadores relacionados

CVE-2005-2678

Produtos afetados

Iis

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2678 · Nota
• http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2678 · Nota de Segurança
• http://secunia.com/advisories/16548 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/1503 · Nota
• http://marc.info/?l=bugtraq&m=112474727903399&w=2 · Nota