Test ID:	1.3.6.1.4.1.25623.1.0.101017
Category:	Windows : Microsoft Bulletins
Title:	Microsoft IIS MS03-018 Security Check
Summary:	A Cross-Site Scripting(XSS)vulnerability affecting IIS 4.0, 5.0 and 5.1 involving the error message that's returned to advise that a; requested URL has been redirected. An attacker who was able to lure a user into clicking a link on his or her web site could relay a request containing script to a; third-party web site running IIS, thereby causing the third-party site's response (still including the script) to be sent to the user.; The script would then render using the security settings of the third-party site rather than the attacker's.;; A buffer overrun that results because IIS 5.0 does not correctly validate requests for certain types of web pages known as server side includes.;; A denial of service vulnerability that results because of a flaw in the way IIS 4.0 and 5.0 allocate memory requests when constructing; headers to be returned to a web client.;; A denial of service vulnerability that results because IIS 5.0 and 5.1 do not correctly handle an error condition when; an overly long WebDAV request is passed to them. As a result an attacker could cause IIS to fail.
Description:	Summary: A Cross-Site Scripting(XSS)vulnerability affecting IIS 4.0, 5.0 and 5.1 involving the error message that's returned to advise that a requested URL has been redirected. An attacker who was able to lure a user into clicking a link on his or her web site could relay a request containing script to a third-party web site running IIS, thereby causing the third-party site's response (still including the script) to be sent to the user. The script would then render using the security settings of the third-party site rather than the attacker's. A buffer overrun that results because IIS 5.0 does not correctly validate requests for certain types of web pages known as server side includes. A denial of service vulnerability that results because of a flaw in the way IIS 4.0 and 5.0 allocate memory requests when constructing headers to be returned to a web client. A denial of service vulnerability that results because IIS 5.0 and 5.1 do not correctly handle an error condition when an overly long WebDAV request is passed to them. As a result an attacker could cause IIS to fail. Solution: Microsoft has released a patch to correct these issues There is a dependency associated with this patch - it requires the patch from Microsoft Security Bulletin MS02-050 to be installed. If this patch is installed and MS02-050 is not present, client side certificates will be rejected. This functionality can be restored by installing the MS02-050 patch. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0223 Microsoft Security Bulletin: MS03-018 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A66 Common Vulnerability Exposure (CVE) ID: CVE-2003-0224 http://marc.info/?l=ntbugtraq&m=105431767100944&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A483 Common Vulnerability Exposure (CVE) ID: CVE-2003-0225 http://www.aqtronix.com/Advisories/AQ-2003-01.txt http://marc.info/?l=ntbugtraq&m=105110606122772&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A373 Common Vulnerability Exposure (CVE) ID: CVE-2003-0226 Bugtraq: 20030528 Internet Information Services 5.0 Denial of service (Google Search) http://archives.neohapsis.com/archives/bugtraq/2003-05/0308.html Bugtraq: 20030529 IIS WEBDAV Denial of Service attacks (Google Search) http://marc.info/?l=bugtraq&m=105427362724860&w=2 http://www.spidynamics.com/iis_alert.html http://marc.info/?l=ntbugtraq&m=105421243732552&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A933
Copyright	Copyright (C) 2009 Christian Eric Edjenguele

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.