PT-2008-1731 · Microsoft · Internet Information Services

Publicado 2008-02-12 · Atualizado 2020-11-23 · CVE-2008-0075

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services (IIS) versions 5.1 through 6.0

Description The issue allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

Recommendations For versions 5.1 through 6.0, update to a version that is not affected by this issue.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-0075

Produtos afetados

Internet Information Services

Referências · 10

• http://securitytracker.com/id?1019385 · Nota
• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Aviso do Fabricante
• http://securityfocus.com/bid/27676 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5308 · Nota
• http://vupen.com/english/advisories/2008/0508/references · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0075 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-006 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Nota
• http://secunia.com/advisories/28893 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0075 · Nota de Segurança