exploits , vulnerabilities , articles , Microsoft IIS Redirection Error Page Cross-Site Scripting Vulnerability

Title	Microsoft IIS Redirection Error Page Cross-Site Scripting Vulnerability
Published	2003-05-28-12:00AM
Updated	2003-05-28-08:48PM
Class	Input Validation Error
CVE	CAN-2003-0223
Remote	Yes
Local	No
Credit	Discovery is credited to SPIDynamics SPI Labs.
Vulnerable	Microsoft IIS 5.1 Microsoft Windows XP 64bit Edition Microsoft Windows XP 64bit Edition SP1 Microsoft Windows XP Home Microsoft Windows XP Home SP1 Microsoft Windows XP Professional Microsoft Windows XP Professional SP1 Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP2 Microsoft IIS 4.0 Cisco Building Broadband Service Manager 5.0 Cisco Call Manager 1.0 Cisco Call Manager 2.0 Cisco Call Manager 3.0 Cisco ICS 7750 Cisco IP/VC 3540 Video Rate Matching Module Cisco Unity Server 2.0 Cisco Unity Server 2.2 Cisco Unity Server 2.3 Cisco Unity Server 2.4 Cisco uOne 1.0 Cisco uOne 2.0 Cisco uOne 3.0 Cisco uOne 4.0 Microsoft BackOffice 4.0 Microsoft BackOffice 4.5 Microsoft Windows NT 4.0 Option Pack
Not Vulnerable	Microsoft IIS 6.0 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition 64-bit Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition 64-bit Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-19 Serv-U File Server User Directory Information Disclosure Vulnerability
2009-12-18 ReVou Comment Field HTML Injection Vulnerability
2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities