CVE-2008-4301
published 2008-09-29CVE-2008-4301: A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the…
PriorityP347critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
16.92%
96.7th percentile
A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.attrition.org/pipermail/vim/2008-October/002081.htmlhttp://www.securityfocus.com/archive/1/496694/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/45587http://www.attrition.org/pipermail/vim/2008-October/002081.htmlhttp://www.securityfocus.com/archive/1/496694/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/45587
2008-09-29
Published