PT-2001-1560 · Microsoft · Iis

Published 2001-06-27 · Updated 2018-10-12 · CVE-2001-0335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 5.0 and earlier

Description The issue allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters in the FTP service.

Recommendations For IIS versions 5.0 and earlier, consider disabling the FTP service until a patch is available. Restrict access to the FTP service to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0335

Affected Products

Iis

References · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0335 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0335 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6545 · Note
• http://securityfocus.com/bid/2719 · Note