Microsoft Internet_information_server
111 CVEs affecting Microsoft Internet_information_server. Latest disclosed: 2013-05-22. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0334 | High | 7.5 | 2001-06-27 | FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expande… |
CVE-2000-0258 | High | 7.5 | 2000-04-12 | IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Ch… |
CVE-1999-0012 | High | 7.0 | 1998-02-06 | Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. |
CVE-2013-0942 | | 2013-05-22 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for W… | |
CVE-2013-0941 | | 2013-05-22 | EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and… | |
CVE-2010-1899 | | 2010-09-15 | Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to ca… | |
CVE-2010-1256 | | 2010-06-08 | Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to exec… | |
CVE-2003-1582 | | 2010-02-05 | Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text int… | |
CVE-2009-3023 | | 2009-08-31 | Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code… | |
CVE-2008-0075 | | 2008-02-12 | Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs… | |
CVE-2008-0074 | | 2008-02-12 | Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to… | |
CVE-2007-2897 | | 2007-05-30 | Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain… | |
CVE-2007-1278 | | 2007-03-16 | Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote… | |
CVE-2007-0087 | | 2007-01-05 | Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of se… | |
CVE-2006-6579 | | 2006-12-15 | Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users t… | |
CVE-2006-0026 | | 2006-07-11 | Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via cra… | |
CVE-2005-2678 | | 2005-08-23 | Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with… | |
CVE-2003-0718 | | 2004-11-03 | The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhau… | |
CVE-2004-0205 | | 2004-08-06 | Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function. | |
CVE-2003-1342 | | 2003-12-31 | Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL… |