IIS 6.0的WEB管理接口存在多个问题

韩冰

Microsoft IIS 6.0的WEB管理接口存在多个问题，远程攻击者可以利用这个漏洞进行跨站脚...
来源：CNCERT 2003-08-01
8 X3 _* b* d  d7 Y; @9 X

- F# `. p2 m5 Y$ c; P! UCNCVE编号：CNCVE-20031438
) J6 J' G) X$ m+ r# T
CVE编号：
  J  M! I; B8 |: F; R( I& U* g
2 E" c- a+ _( R- g/ ]) L安全级别：高

5 r* m* M; n( I& W/ L漏洞中文描述：
Microsoft IIS 6.0的WEB管理接口存在多个问题，远程攻击者可以利用这个漏洞进行跨站脚本攻击，获得合法会话ID或未授权访问部分资源。

" g3 p3 Z6 _3 D- b2 @- r漏洞英文描述：
Multiple vulnerabilities have been reported in the web admin interface that is included in Microsoft IIS 6.0. This includes multiple instances of cross-site scripting vulnerabilities. Additionally, it is reported that the web admin interface could expose valid session IDs or permit unauthorized access to areas that do not require session IDs.
) Y- k9 u: J. d( o* L- P7 z
漏洞参考：
' Y( N0 |# m1 G" p# uhttp://www.securityfocus.com/bid/8244
* Z! {; A' W6 p
系统类型： Win2000/NT
4 @& }( p1 M2 T
- C" v$ n) [$ g" _+ u. \漏洞类型：其他

ilikenba

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com