NVD

Id
77978  
Name
CVE-2001-0506  
Description
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2001-09-20  
Modified Date
2016-10-17  
Seq
2001-0506  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
390472 77978 CVE-2001-0506 20010817 NSFOCUS SA2001-06 : Microsoft IIS ssinc.dll Buffer Overflow Vulnerability  View
390473 77978 CVE-2001-0506 20011127 IIS Server Side Include Buffer overflow exploit code  View
390474 77978 CVE-2001-0506 L-132  View
390475 77978 CVE-2001-0506 MS01-044  View
390476 77978 CVE-2001-0506 3190  View
390477 77978 CVE-2001-0506 iis-ssi-directive-bo(6984)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64156 JVNDB-2001-000130 Microsoft IIS の SSI 機能におけるバッファオーバーフローの脆弱性 Microsoft IIS に実装されている SSI 機能には、インクルードされるパス名を含むファイル名を取り扱う DLL でバッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0506 3323 CVE-2001-0506 77978 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000130.html 2001-08-17 2007-04-01 View