Filtered by vendor Microsoft Subscriptions
Filtered by product Internet Information Server Subscriptions
Total 111 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2003-1342 2 Microsoft, Trend Micro 2 Internet Information Server, Virus Control System 2025-04-03 N/A
Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL requests for ActiveSupport.exe.
CVE-1999-0450 1 Microsoft 2 Internet Information Server, Internet Information Services 2025-04-03 N/A
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
CVE-1999-0448 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
CVE-1999-1451 1 Microsoft 2 Internet Information Server, Site Server 2025-04-03 N/A
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
CVE-1999-0278 1 Microsoft 2 Internet Information Server, Windows Nt 2025-04-03 N/A
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
CVE-2000-0114 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
CVE-1999-1148 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.
CVE-1999-0348 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0407 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVE-1999-0449 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.
CVE-1999-1591 1 Microsoft 2 Internet Information Server, Visual Interdev 2025-04-03 N/A
Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0.
CVE-1999-0154 1 Microsoft 2 Internet Information Server, Internet Information Services 2025-04-03 N/A
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL.
CVE-2002-1694 1 Microsoft 2 Internet Information Server, Internet Information Services 2025-04-03 N/A
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
CVE-1999-0777 1 Microsoft 2 Commercial Internet System, Internet Information Server 2025-04-03 N/A
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
CVE-1999-0874 1 Microsoft 3 Internet Information Server, Windows 2000, Windows Nt 2025-04-03 N/A
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
CVE-2001-0545 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.
CVE-1999-1375 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
CVE-1999-1376 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.
CVE-1999-0739 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.
CVE-1999-0738 1 Microsoft 1 Internet Information Server 2025-04-03 N/A
The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.