PT-2001-2057 · Microsoft · Iis

Published 2001-11-20 · Updated 2018-10-30 · CVE-2001-0902

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS version 5.0

Description The issue allows remote attackers to spoof web log entries. This is achieved by sending an HTTP request that includes hex-encoded newline or form-feed characters.

Recommendations For Microsoft IIS version 5.0, update to a newer version that addresses this issue to prevent web log entry spoofing.

Fix

Related Identifiers

CVE-2001-0902

Affected Products

Iis

References · 6

• http://securityfocus.com/bid/6795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0902 · Security Note
• http://marc.info/?l=bugtraq&m=100626531103946&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0902 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7613 · Note
• http://marc.info/?l=ntbugtraq&m=100627497122247&w=2 · Note