PT-2007-7338 · Microsoft+1 · Iis+1

Published 2007-12-20 · Updated 2018-10-15 · CVE-2007-6504

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hosting Controller versions prior to 6.1 Hot fix 3.3

Description The issue allows remote authenticated users to modify the headers of arbitrary hosts. This is achieved by manipulating an unspecified parameter in the iibind.asp file of IIS.

Recommendations For versions prior to 6.1 Hot fix 3.3, update to a version later than 6.1 Hot fix 3.3 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6504

Affected Products

Hosting Controller

Iis

References · 8

• 🔥 http://securityfocus.com/bid/26862 · Exploit
• 🔥 https://exploit-db.com/exploits/4730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6504 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39048 · Note
• http://secunia.com/advisories/28973 · Note
• http://securityfocus.com/archive/1/485028/100/0/threaded · Note
• http://securitytracker.com/id?1019222 · Note
• http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html · Note