Microsoft IIS 6.0的WEB管理接口存在多个问题，远程攻击者可以利用这个漏洞进行跨站脚... 6 r4 q" U5 k) c* k
来源：CNCERT 2003-08-01 . [% G A& W2 V2 `
% J/ W' T* W7 K- E% z; t! ` B# Y ; M6 V' W+ b5 ?5 H3 BCNCVE编号：CNCVE-200314383 {- l' r3 D! r7 d. r$ q7 i
/ E, P" o/ C* P, }! H
CVE编号： 7 m+ X3 W4 p3 w( X, P+ e. ]8 c" B$ J& E2 n7 a2 B( H3 V2 q7 `
安全级别：高0 x# D: F2 b) L8 `- e$ [) a: l
$ q+ l9 O# _) f% l( V漏洞中文描述： D! L- Z7 P+ A8 MMicrosoft IIS 6.0的WEB管理接口存在多个问题，远程攻击者可以利用这个漏洞进行跨站脚本攻击，获得合法会话ID或未授权访问部分资源。/ y( s: ?/ Q0 a
9 [9 P9 p0 P: [8 Z! M0 c; p
漏洞英文描述： 6 d* g) K! ~& \' ]; E+ yMultiple vulnerabilities have been reported in the web admin interface that is included in Microsoft IIS 6.0. This includes multiple instances of cross-site scripting vulnerabilities. Additionally, it is reported that the web admin interface could expose valid session IDs or permit unauthorized access to areas that do not require session IDs.3 c0 t, T; k ~: v* l1 K
, B' l/ Z4 G5 t
漏洞参考：, ~2 `2 X5 a* t/ n h8 D
http://www.securityfocus.com/bid/8244. P C" E5 N3 i5 r
: T3 o- z8 v( `, R' z* h
系统类型： Win2000/NT ' }$ w' z8 L: _4 |
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com
IP卡
狗仔卡
发表于 2004-10-9 14:26
转播
淘帖
分享
收藏
支持
反对
微信
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡
发表于 2004-10-19 20:12
