medium5.0Public exploit code
CVE-2001-1243
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an A…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0/5.0 - Device File Remote Denial of Service2001-07-04 · dos · windows · Verified
- Microsoft IIS 4.0/5.0 - Device File Local Denial of Service2001-07-04 · dos · windows · Verified
Impact
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
| Microsoft | Internet Information Services | Version 5.0 |