CVE

Id
3323  
CVE No.
CVE-2001-0506  
Status
Entry  
Description
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14109 3323 CVE-2001-0506 BUGTRAQ:20010817 NSFOCUS SA2001-06 : Microsoft IIS ssinc.dll Buffer Overflow Vulnerability  View
14110 3323 CVE-2001-0506 URL:http://marc.info/?l=bugtraq&m=99802093532233&w=2  View
14111 3323 CVE-2001-0506 BUGTRAQ:20011127 IIS Server Side Include Buffer overflow exploit code  View
14112 3323 CVE-2001-0506 URL:http://online.securityfocus.com/archive/1/242541  View
14113 3323 CVE-2001-0506 MS:MS01-044  View
14114 3323 CVE-2001-0506 URL:http://www.microsoft.com/technet/security/bulletin/ms01-044.asp  View
14115 3323 CVE-2001-0506 CIAC:L-132  View
14116 3323 CVE-2001-0506 URL:http://www.ciac.org/ciac/bulletins/l-132.shtml  View
14117 3323 CVE-2001-0506 BID:3190  View
14118 3323 CVE-2001-0506 URL:http://www.securityfocus.com/bid/3190  View
14119 3323 CVE-2001-0506 XF:iis-ssi-directive-bo(6984)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64156 JVNDB-2001-000130 Microsoft IIS の SSI 機能におけるバッファオーバーフローの脆弱性 Microsoft IIS に実装されている SSI 機能には、インクルードされるパス名を含むファイル名を取り扱う DLL でバッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0506 3323 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000130.html  View