Microsoft Internet Information Services 5 Authentication Bypass Vulnerability
Data de publicação: 21 julho 2015
Schweregrad: : Medium
Identificador(es) CVE: : CVE-2010-2731,MS10-065
Data do informe: 21 julho 2015
Descrição
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 on Windows XP SP3, when directory-based Basic Authentication is enabled, allows remote attackers to bypass intended access restrictions and execute ASP files via a crafted request, aka "Directory Authentication Bypass Vulnerability."
Exposição das informações
Apply associated Trend Micro DPI Rules.
Solução
Trend Micro Deep Security DPI Rule Number: 1004270
Trend Micro Deep Security DPI Rule Name: 1004270 - Microsoft Internet Information Services 5 Authentication Bypass Vulnerability
Software infectado e versão:
- Microsoft IIS 5.1