CVE-2000-0951
published 2000-12-19CVE-2000-0951: A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web…
PriorityP427medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
44.13%
98.6th percentile
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_information_services | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
exploitdb·2001-12-11
CVE-2001-0951 Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (1)
---
// source: https://www.securityfocus.com/bid/3652/info
Internet Protocol Security (IPSec) provides authentication and encryption for IP network traffic. The Internet Key Exchange (IKE) protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec standard by providing additional features and by default listens on UDP port 500.
An issue exists in IKE which could cause a Windows 2000 host to stop responding.
Connecting to port 500 and submitting a continuous stream of arbitrary packets, will cause the CPU utilization to spike to approximately 100%.
It should be noted that this vulnerability may be due to an underlying issue with the UDP protocol.
/* Auto
Exploit-DB
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)
exploitdb·2001-12-07
CVE-2001-0951 Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)
Microsoft Windows Server 2000 - Internet Key Exchange Denial of Service (2)
---
source: https://www.securityfocus.com/bid/3652/info
Internet Protocol Security (IPSec) provides authentication and encryption for IP network traffic. The Internet Key Exchange (IKE) protocol is a management protocol standard which is used with the IPSec standard. IKE contributes to the IPSec standard by providing additional features and by default listens on UDP port 500.
An issue exists in IKE which could cause a Windows 2000 host to stop responding.
Connecting to port 500 and submitting a continuous stream of arbitrary packets, will cause the CPU utilization to spike to approximately 100%.
It should be noted that this vulnerability may be due to an underlying issue with the UDP protocol.
#!/usr/bin/
Exploit-DB
Microsoft IIS 5.0 - Indexed Directory Disclosure
exploitdb·2000-10-04
CVE-2000-0951 Microsoft IIS 5.0 - Indexed Directory Disclosure
Microsoft IIS 5.0 - Indexed Directory Disclosure
---
source: https://www.securityfocus.com/bid/1756/info
If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed Authoring and Versioning (WebDAV) search implementation. Hidden directories, include files (*.inc), or other documents that would not normally be accessible through the regular website interface can be exposed through this exploit.
Successful exploitation could lead to the discovery of certain files that may contain sensitive information such as usernames and passwords.
The Index Server is disabled by default in IIS 5.0 and only directories that have the 'Index' property set
Exploit-DB
Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow
exploitdb·1999-10-22
CVE-1999-0951 Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow
Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow
---
// source: https://www.securityfocus.com/bid/739/info
There is a remotely exploitable buffer overflow vulnerability in the CGI program "imagemap", which is distributed with Omnicron's OmniHTTPD. During operations made on arguments passed to the program, a lack of bounds checking on a strcpy() call can allow for arbitrary code to be executed on the machine running the server.
/*=============================================================================
Imagemap 1.00.00 CGI Exploit (Distributed with OmniHTTPd 1.01 and Pro2.04)
The Shadow Penguin Security (http://shadowpenguin.backsection.net)
Written by UNYUN ([email protected])
*/
#include
#include
#include
#include
#define MAXBUF 2000
#define RETADR 348
#define
No writeups or analysis indexed.
http://www.atstake.com/research/advisories/2000/a100400-1.txthttp://www.microsoft.com/technet/support/kb.asp?ID=272079http://www.securityfocus.com/bid/1756https://exchange.xforce.ibmcloud.com/vulnerabilities/5335http://www.atstake.com/research/advisories/2000/a100400-1.txthttp://www.microsoft.com/technet/support/kb.asp?ID=272079http://www.securityfocus.com/bid/1756https://exchange.xforce.ibmcloud.com/vulnerabilities/5335
2000-12-19
Published