NVD

Id
54978  
Name
CVE-2007-2815  
Description
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-22  
Modified Date
2008-11-15  
Seq
2007-2815  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279147 54978 CVE-2007-2815 2725  View
279148 54978 CVE-2007-2815 328832  View
279149 54978 CVE-2007-2815 20070522 [ISecAuditors Security Advisories] Microsoft IIS5 NTLM and Basic authentication bypass  View
279150 54978 CVE-2007-2815 24105  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55197 JVNDB-2007-003889 Microsoft IIS Web Server の webhits.dll における非公開 Web ディレクトリへアクセスされる脆弱性 Microsoft Internet Information Services (IIS) Web Server の webhits.dll の "hit-highlighting" 機能は、Windows NT ACL 設定を唯一使用するため、NTLM およびベーシック認証メカニズムを回避される、および非公開 Web ディレクトリへアクセスされる脆弱性が存在します。 CVE-2007-2815 26170 CVE-2007-2815 54978 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003889.html 2007-05-22 2012-09-25 View