CVEvulnerability
CVE-2005-4360
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:C/A:N
- Weaknesses
- CWE-252
Description
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).
Affected configurations
• microsoft internet information services 5.1
Related
Weakness · CWE (1)
- CWE-252 Unchecked Return Value weakness
References
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Issue Tracking, Third Party Advisory
- http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18106 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/271 Third Party Advisory
- http://securitytracker.com/alerts/2005/Dec/1015376.html Third Party Advisory, VDB Entry
- http://www.osvdb.org/21805 Broken Link
- http://www.securityfocus.com/archive/1/419707/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/15921 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-191A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2005/2963 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703 Third Party Advisory
- http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Issue Tracking, Third Party Advisory
- http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18106 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/271 Third Party Advisory
- http://securitytracker.com/alerts/2005/Dec/1015376.html Third Party Advisory, VDB Entry
- http://www.osvdb.org/21805 Broken Link
- http://www.securityfocus.com/archive/1/419707/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/15921 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-191A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2005/2963 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703 Third Party Advisory