CVE

Id
34418  
CVE No.
CVE-2008-4301  
Status
Candidate  
Description
** DISPUTED ** A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous.  
Phase
Assigned (20080929)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
376957 34418 CVE-2008-4301 BUGTRAQ:20080924 Internet Information Service remote set password  View
376958 34418 CVE-2008-4301 URL:http://www.securityfocus.com/archive/1/archive/1/496694/100/0/threaded  View
376959 34418 CVE-2008-4301 VIM:20081002 Fwd: Internet Information Service remote set password  View
376960 34418 CVE-2008-4301 URL:http://www.attrition.org/pipermail/vim/2008-October/002081.html  View
376961 34418 CVE-2008-4301 XF:iis-iisext-weak-security(45587)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50939 JVNDB-2008-006249 phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性 phpCollab の installation/setup.php は、静的コードを挿入されることにより、include/settings.php に任意の PHP コードを挿入される脆弱性が存在します。 CVE-2008-4305 34418 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006249.html  View