Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Vulnerability - CVE-2006-6578 - Vulnerability Database
Internet Information Services

Internet Information Services Vulnerability - CVE-2006-6578

High
Reference: CVE-2006-6578
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-6578
Title: Internet Information Services Vulnerability
Overview:

Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments as demonstrated using win.com when it is in a web directory with certain permissions.