CVE

Id
3324  
CVE No.
CVE-2001-0507  
Status
Entry  
Description
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14120 3324 CVE-2001-0507 BUGTRAQ:20010816 ENTERCEPT SECURITY ALERT: Privilege Escalation Vulnerability in Microsoft IIS  View
14121 3324 CVE-2001-0507 URL:http://online.securityfocus.com/archive/1/205069  View
14122 3324 CVE-2001-0507 MS:MS01-044  View
14123 3324 CVE-2001-0507 URL:http://www.microsoft.com/technet/security/bulletin/ms01-044.asp  View
14124 3324 CVE-2001-0507 XF:iis-relative-path-privilege-elevation(6985)  View
14125 3324 CVE-2001-0507 URL:http://xforce.iss.net/static/6985.php  View
14126 3324 CVE-2001-0507 CIAC:L-132  View
14127 3324 CVE-2001-0507 URL:http://www.ciac.org/ciac/bulletins/l-132.shtml  View
14128 3324 CVE-2001-0507 OSVDB:5607  View
14129 3324 CVE-2001-0507 URL:http://www.osvdb.org/5607  View
14130 3324 CVE-2001-0507 OVAL:oval:org.mitre.oval:def:909  View
14131 3324 CVE-2001-0507 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:909  View
14132 3324 CVE-2001-0507 OVAL:oval:org.mitre.oval:def:912  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64149 JVNDB-2001-000123 Microsoft IIS のプロセス内テーブルにおける権限昇格の脆弱性 Microsoft IIS には Guest アカウントの権限から昇格でき、結果として System 権限で Web 公開用ディレクトリ内に置かれた任意のコードを実行できる脆弱性が存在します。 CVE-2001-0507 3324 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000123.html  View