Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductInternet Information Server (e2ca0da4-4169-50aa-a181-28aef2db6269)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7269 vulnerable 2026-06-08 05:09:55.577500 Details available
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
Published: 2017-03-27T01:55:00.000Z
Updated: 2025-10-21T23:55:43.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1899 vulnerable 2026-06-08 04:54:10.918949 Details available
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
Published: 2010-09-15T18:00:00.000Z
Updated: 2024-08-07T02:17:12.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1256 vulnerable 2026-06-08 04:54:06.873061 Details available
Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
Published: 2010-06-08T20:00:00.000Z
Updated: 2024-08-07T01:21:17.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0075 vulnerable 2026-06-08 04:50:10.178313 Details available
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.
Published: 2008-02-12T20:00:00.000Z
Updated: 2024-08-07T07:32:23.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0074 vulnerable 2026-06-08 04:50:10.176401 Details available
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
Published: 2008-02-12T20:00:00.000Z
Updated: 2024-08-07T07:32:23.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2897 vulnerable 2026-06-08 04:49:46.466515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1278 not_vulnerable 2026-06-08 04:49:41.959969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0026 vulnerable 2026-06-08 04:48:45.715235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2678 vulnerable 2026-06-08 04:48:30.224395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1582 vulnerable 2026-06-08 04:47:47.996148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0718 vulnerable 2026-06-08 04:47:22.305257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.