Directory Authentication Bypass Vulnerability
Data de publicação: 31 maio 2016
Schweregrad: : Medium
Identificador(es) CVE: : MS10-065,CVE-2010-2731
Data do informe: 31 maio 2016
Descrição
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability."
Exposição das informações
Apply associated Trend Micro DPI Rules.
Solução
Trend Micro Deep Security DPI Rule Number: 1004399
Trend Micro Deep Security DPI Rule Name: 1004399 - Directory Authentication Bypass Vulnerability
Software infectado e versão:
- microsoft iis 5.1