NVD

Id
69958  
Name
CVE-2005-4360  
Description
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-03  
Published
2005-12-19  
Modified Date
2011-10-03  
Seq
2005-4360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
361268 69958 CVE-2005-4360 SSRT071446  View
361269 69958 CVE-2005-4360 http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html  View
361270 69958 CVE-2005-4360 oval:org.mitre.oval:def:1703  View
361271 69958 CVE-2005-4360 271  View
361272 69958 CVE-2005-4360 1015376  View
361273 69958 CVE-2005-4360 MS07-041  View
361274 69958 CVE-2005-4360 20051216 Microsoft IIS Remote Denial of Service (DoS) .DLL Url exploit  View
361275 69958 CVE-2005-4360 15921  View
361276 69958 CVE-2005-4360 TA07-191A  View
361277 69958 CVE-2005-4360 ADV-2005-2963  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62537 JVNDB-2005-000739 Microsoft IIS における不正な HTTP リクエストの処理によるサービス運用妨害 (DoS) の脆弱性 Microsoft IIS には、仮想ディレクトリに対して [スクリプトおよび実行可能ファイル] の実行アクセス権を有効にしている場合、この仮想ディレクトリに対する特定の HTTP リクエスト (URL) の取り扱いに不備が存在するため、inetinfo.exe がクラッシュしてしまう脆弱性が存在します。 CVE-2005-4360 15562 CVE-2005-4360 69958 7.8 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000739.html 2005-12-16 2007-07-18 View