Internet Information Services Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2003-1582 - Vulnerability Database

Internet Information Services Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2003-1582

Low

Reference: CVE-2003-1582

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2003-1582

Title: Internet Information Services Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Microsoft Internet Information Services (IIS) 6.0 when DNS resolution is enabled for client IP addresses allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response as demonstrated by injecting XSS sequences related to an quotInverse Lookup Log Corruption (ILLC)quot issue.