medium5.0Public exploit code
CVE-2003-1566
Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive informatio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests2003-12-29 · remote · windows · Verified
Impact
Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Services | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html
- http://www.aqtronix.com/Advisories/AQ-2003-02.txt
- http://www.osvdb.org/4864
- http://www.securityfocus.com/bid/9313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14077
- http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html
- http://www.aqtronix.com/Advisories/AQ-2003-02.txt
- http://www.osvdb.org/4864
- http://www.securityfocus.com/bid/9313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14077