PT-2005-3564 · Microsoft · Iis

Inge Eivind Henriksen · Published 2005-08-23 · Updated 2020-11-23 · CVE-2005-2678

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft IIS versions 5.1 through 6

Description The issue allows remote attackers to spoof the SERVER NAME variable, bypassing security checks and enabling various attacks. This is achieved through a GET request with an http://localhost URI, making the request appear as if it is coming from localhost.

Recommendations For Microsoft IIS versions 5.1 through 6, consider restricting access to the SERVER NAME variable to minimize the risk of exploitation. As a temporary workaround, avoid using the SERVER NAME variable in security checks until a patch is available.

Fix

Related Identifiers

CVE-2005-2678

Affected Products

Iis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-2678 · Security Note
• http://secunia.com/advisories/16548 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2678 · Note
• http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html · Note
• http://vupen.com/english/advisories/2005/1503 · Note
• http://marc.info/?l=bugtraq&m=112474727903399&w=2 · Note