Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Other Vulnerability - CVE-2001-0506 - Vulnerability Database
Internet Information Services

Internet Information Services Other Vulnerability - CVE-2001-0506

High
Reference: CVE-2001-0506
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2001-0506
Title: Internet Information Services Other Vulnerability
Overview:

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename which triggers the overflow when the directory name is added aka the quotSSI privilege elevationquot vulnerability.