Multiple bugs in Microsoft Internet Information Server updated since 10.04.2002
Published:		10.04.2002
Source:		MICROSOFT
SecurityVulns ID:		1923
Type:		remote
Level:		8/10
Description:		Multiple buffer overflows, crossite scripting, DoS.

Affected:		MICROSOFT : Internet Information Server 4.0
		MICROSOFT : Internet Information Server 5.0
		MICROSOFT : Internet Information Server 5.1

Original document		SNS, [SNS Advisory No.58] Microsoft IIS Local Cross-site Scripting Vulnerability (05.11.2002)
		li0n, [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002) (04.11.2002)
		NGSSoftware Insight Security Research, Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002) (31.10.2002)
		MICROSOFT, Microsoft Security Bulletin MS02-062: Cumulative Patch for Internet Information Service (Q327696) (31.10.2002)
		CHINANSL, Windows 2000 Server IIS 5.0 .ASP Overflow Exploit (06.05.2002)
		Peter Gründl, KPMG-2002015: Microsoft Distributed Transaction Coordinator DoS (20.04.2002)
		CISCO, Security Advisory: Microsoft IIS Vulnerabilities in Cisco Products - MS02-018 (17.04.2002)
		H D Moore, Microsoft FTP Service STAT Globbing DoS (17.04.2002)
		CERT, Advisory CA-2002-09 Multiple Vulnerabilities in Microsoft IIS (12.04.2002)
		SNS, [SNS Advisory No.49] A Possibility of Internet Information Server/Services Cross Site Scripting (11.04.2002)
		Peter Gründl, KPMG-2002010: Microsoft IIS .htr ISAPI buffer overrun (11.04.2002)
		Peter Gründl, KPMG-2002009: Microsoft IIS W3SVC Denial of Service (11.04.2002)
		Dave Aitel, SPIKE version released that detects .HTR and ISAPI overflows (see spike.sourceforge.net) (11.04.2002)
		Thor Larholm, IIS allows universal CrossSiteScripting (11.04.2002)
		X-FORCE, Multiple Remote Vulnerabilities in Microsoft IIS (11.04.2002)
		zeno, Cgisecurity Advisory #9: Novell Websearch, and Microsoft IIS XSS Issues (11.04.2002)
		EEYE, Windows 2000 and NT4 IIS .ASP Remote Buffer Overflow (10.04.2002)
		MICROSOFT, Security Bulletin MS02-018 : Cumulative Patch for Internet Information Services (Q319733) (10.04.2002)

Discuss:

Read or add your comments to this news (0 comments)