2 L) F- |8 D7 X: lCNCVE编号：CNCVE-20031438 ) l- K; J. \8 F1 V L" D % U+ F; \, @/ n+ p X0 K# RCVE编号： ' K8 Q: |( G* V2 M* E) p+ I; V: w2 P9 u, v' f6 a
安全级别：高7 ^" |. K) Z: O& V G0 U
3 Z4 _1 ~& ?( L; V3 D& e5 g" ]
漏洞中文描述： ; @) ^7 g$ B0 l. K# A: f6 QMicrosoft IIS 6.0的WEB管理接口存在多个问题，远程攻击者可以利用这个漏洞进行跨站脚本攻击，获得合法会话ID或未授权访问部分资源。 " V0 i7 F% u# |4 R7 v' l8 w E9 s( C8 `2 M" _
漏洞英文描述： . s) n7 |' v5 B* p6 PMultiple vulnerabilities have been reported in the web admin interface that is included in Microsoft IIS 6.0. This includes multiple instances of cross-site scripting vulnerabilities. Additionally, it is reported that the web admin interface could expose valid session IDs or permit unauthorized access to areas that do not require session IDs. & ]5 O; Q; _, z4 b# H 9 {/ d9 A6 u7 y4 t4 r漏洞参考：! j+ j3 q5 r5 K
http://www.securityfocus.com/bid/8244 . A! I) T8 ~) ?+ x* R0 [7 r5 i& k; b2 u$ T1 \
系统类型： Win2000/NT / k9 F* d. @, H3 R, y0 L$ C: n* K8 u8 |8 p" y' t2 Y+ L* Z
漏洞类型：其他作者: ilikenba 时间: 2004-10-19 20:12
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com