XSS in Microsoft Internet_information_server

CVE-2003-1582

Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as d…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.050 (89.9th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_information_server — versions 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

20030304 Log corruption on multiple webservers, log analyzers,... (mailing-list, Exploit, x_refsource_BUGTRAQ)