CVE

Id
4814  
CVE No.
CVE-2002-0422  
Status
Candidate  
Description
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.  
Phase
Modified (20070919)  
Votes
ACCEPT(1) Alderson | MODIFY(1) Frech | NOOP(3) Cole, Cox, Foat | REVIEWING(1) Wall  
Comments
Frech> XF:iis-request-ip-disclosure(8385)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
24555 4814 CVE-2002-0422 BUGTRAQ:20020305 IIS Internal IP Address Disclosure (#NISR05032002B)  View
24556 4814 CVE-2002-0422 URL:http://marc.info/?l=bugtraq&m=101536634207324&w=2  View
24557 4814 CVE-2002-0422 NTBUGTRAQ:20020305 IIS Internal IP Address Disclosure (#NISR05032002B)  View
24558 4814 CVE-2002-0422 URL:http://marc.info/?l=ntbugtraq&m=101535147125320&w=2  View
24559 4814 CVE-2002-0422 OSVDB:13431  View
24560 4814 CVE-2002-0422 URL:http://www.osvdb.org/13431  View
24561 4814 CVE-2002-0422 XF:iis-request-ip-disclosure(8385)  View

Related JVN