PT-2002-1473 · Microsoft · Iis

Published 2002-06-11 · Updated 2020-11-23 · CVE-2002-0419

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIS versions 4 through 5.1

Description The issue allows remote attackers to obtain potentially sensitive information, making it easier to conduct brute force attacks. This is achieved through server responses that reveal certain details. In specific configurations, the server IP address is provided as the realm for Basic authentication, potentially exposing real IP addresses hidden by NAT. Additionally, when NTLM authentication is used, the server's NetBIOS name and its Windows NT domain are revealed in response to an Authorization request.

Recommendations For IIS versions 4 through 5.1, consider configuring the server to not reveal the IP address as the realm for Basic authentication and restrict the disclosure of the NetBIOS name and Windows NT domain in NTLM authentication responses. As a temporary workaround, restrict access to the NTLM authentication mechanism until a more secure configuration can be implemented.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2002-0419

Affected Products

Iis

References · 6

• 🔥 http://securityfocus.com/bid/4235 · Exploit
• 🔥 https://exploit-db.com/exploits/21313 · Exploit
• http://iss.net/security_center/static/8382.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0419 · Security Note
• http://marc.info/?l=bugtraq&m=101535399100534&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0419 · Note