Microsoft IIS Source Fragment Disclosure

NASLDB: Microsoft IIS Source Fragment Disclosure

General

ID: 10680
Name: Microsoft IIS Source Fragment Disclosure

Summary: Test Microsoft IIS Source Fragment Disclosure

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 80
Family: Web Servers
Type: Remote

Description

Microsoft IIS 4.0 and 5.0 can be made to disclose fragments of source
code which should otherwise be inaccessible. This is done by
appending ‘+.htr’ to a request for a known ‘.asp’ (or ‘.asa’, ‘.ini’,
‘etc’) file.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2000-0457
OSVDB: –
Bugtraq: 1193
scipID: –

Timeline

Vulnerability Disclosure: 1999/01/14
Patch Release: –
Plugin Release: 2001/05/29

Plugin

Version: 1.40
Filename: iis_frag_disclosure.nasl
Filesize: 5233 bytes
MD5 Hash: 09fd18790f16d70daf4f60a00eb39fa0

Identification: –
Require Keys: www/ASP
Dependencies: "find_service1.nasl", "http_version.nasl", "www_fingerprinting_hmap.nasl"

Letzte Plugins

Letzte Plugins

scip AG