Microsoft IS error pages information leak
Published:		23.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5134
Type:		remote
Level:		6/10
Description:		Request variable SERVER_NAME controllable by client is used to validate server access.

Affected:		MICROSOFT : Internet Information Server 5.0
		MICROSOFT : Internet Information Server 5.1
		MICROSOFT : Internet Information Server 6.0

Original document

inge_eivind.henriksen_(at)_chello.no, Remote IIS 5.x and IIS 6.0 Server Name Spoof (23.08.2005)

Discuss:

Read or add your comments to this news (0 comments)