|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
Keywords |
aka the "Specialized Header" vulnerability.
|
|
Description |
Microsoft IIS contains a flaw that may allow a remote attacker to view the source code of ASP/ASA scripts. The issue is due to the server not properly handling the "Translate: f" header, used by WebDAV and FrontPage2000. With a specially crafted header, an attacker can force the server to display script source code instead of processing the script normally. This may reveal sensitive information such as internal IP addresses, account names or passwords.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Information Disclosure,
Input Manipulation
Impact:
Loss of Confidentiality
Solution:
Patch
Exploit:
Exploit Available
Disclosure:
Vendor Verified,
OSVDB Verified,
Coordinated Disclosure
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch (MS00-058) to address this vulnerability.
|
|
Products |
|
IIS
 |
5.0 |
6.0 |
|
|
|
|
|
|
|
Credit |
- Daniel Doèekal -
- Daniel Doèekal -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
