CVE List

Id CVE No. Status Description Phase Votes Comments Actions
7055  CVE-2003-0227  Candidate  The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.  Assigned (20030430)  None (candidate not yet proposed)    View
7054  CVE-2003-0226  Candidate  Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.  Assigned (20030430)  None (candidate not yet proposed)    View
7053  CVE-2003-0225  Candidate  The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.  Assigned (20030430)  None (candidate not yet proposed)    View
7052  CVE-2003-0224  Candidate  Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."  Assigned (20030430)  None (candidate not yet proposed)    View
7051  CVE-2003-0223  Candidate  Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.  Assigned (20030430)  None (candidate not yet proposed)    View

Page 19533 of 20943, showing 5 records out of 104715 total, starting on record 97661, ending on 97665

Actions