|
|
Microsoft IIS Malformed HTTP HOST Header Field Denial Of Service Vulnerability
|
Bugtraq ID:
|
5907
|
|
Class:
|
Failure to Handle Exceptional Conditions
|
|
CVE:
|
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Oct 07 2002 12:00AM
|
|
Updated:
|
Oct 07 2002 12:00AM
|
|
Credit:
|
This issue was discovered during a default run of Spike 2.7 by Dave Aitel <dave@immunitysec.com>.
|
|
Vulnerable:
|
Microsoft IIS 5.1
-
Microsoft Windows 2000 Advanced Server SP2
-
Microsoft Windows 2000 Advanced Server SP1
-
Microsoft Windows 2000 Advanced Server
-
Microsoft Windows 2000 Datacenter Server SP2
-
Microsoft Windows 2000 Datacenter Server SP1
-
Microsoft Windows 2000 Datacenter Server
-
Microsoft Windows 2000 Professional SP2
-
Microsoft Windows 2000 Professional SP1
-
Microsoft Windows 2000 Professional
-
Microsoft Windows 2000 Server SP2
-
Microsoft Windows 2000 Server SP1
-
Microsoft Windows 2000 Server
+
Microsoft Windows XP 64-bit Edition SP1
+
Microsoft Windows XP 64-bit Edition
+
Microsoft Windows XP 64-bit Edition
-
Microsoft Windows XP Home SP1
-
Microsoft Windows XP Home SP1
-
Microsoft Windows XP Home
-
Microsoft Windows XP Home
+
Microsoft Windows XP Professional SP1
+
Microsoft Windows XP Professional SP1
+
Microsoft Windows XP Professional
+
Microsoft Windows XP Professional
Microsoft IIS 5.0
-
Microsoft Windows 2000 Advanced Server SP2
-
Microsoft Windows 2000 Advanced Server SP2
-
Microsoft Windows 2000 Advanced Server SP1
-
Microsoft Windows 2000 Advanced Server SP1
+
Microsoft Windows 2000 Advanced Server
+
Microsoft Windows 2000 Advanced Server
-
Microsoft Windows 2000 Datacenter Server SP2
-
Microsoft Windows 2000 Datacenter Server SP2
-
Microsoft Windows 2000 Datacenter Server SP1
-
Microsoft Windows 2000 Datacenter Server SP1
-
Microsoft Windows 2000 Professional SP2
-
Microsoft Windows 2000 Professional SP2
-
Microsoft Windows 2000 Professional SP1
-
Microsoft Windows 2000 Professional SP1
+
Microsoft Windows 2000 Professional
+
Microsoft Windows 2000 Professional
-
Microsoft Windows 2000 Server SP2
-
Microsoft Windows 2000 Server SP2
-
Microsoft Windows 2000 Server SP1
-
Microsoft Windows 2000 Server SP1
+
Microsoft Windows 2000 Server
+
Microsoft Windows 2000 Server
|
|
|
|
Not Vulnerable:
|
|
|
|
