Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Unchecked Return Value Vulnerability - CVE-2005-4360 - Vulnerability Database
Internet Information Services

Internet Information Services Unchecked Return Value Vulnerability - CVE-2005-4360

High
Reference: CVE-2005-4360
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2005-4360
Title: Internet Information Services Unchecked Return Value Vulnerability
Overview:

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to quot.dllquot followed by arguments such as quot0quot through quot9quot which causes ntdll.dll to produce a return value that is not correctly handled by IIS as demonstrated using quot/_vti_bin/.dll//0quot. NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).