Microsoft Internet Information Server (IIS) 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Internet Information Services (cf577158-daa2-5ed0-a41f-5adab89c3913) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-6579 |
vulnerable | 2026-06-08 04:49:29.246481 |
Details available
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.
Published: 2006-12-15T19:00:00.000Z
Updated: 2024-08-07T20:33:59.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2000-0649 |
vulnerable | 2026-06-08 04:45:18.520572 |
Details available
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
Published: 2000-08-03T04:00:00.000Z
Updated: 2024-08-08T05:28:41.358Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0450 |
vulnerable | 2026-06-08 04:44:58.039675 |
Details available
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).
Published: 2000-02-04T05:00:00.000Z
Updated: 2024-08-01T16:41:44.860Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0412 |
vulnerable | 2026-06-08 04:44:58.027118 |
Details available
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.
Published: 1999-09-29T04:00:00.000Z
Updated: 2024-08-01T16:41:44.212Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0281 |
vulnerable | 2026-06-08 04:44:57.991785 |
Details available
Denial of service in IIS using long URLs.
Published: 1999-09-29T04:00:00.000Z
Updated: 2024-08-01T16:34:51.953Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0253 |
vulnerable | 2026-06-08 04:44:57.983907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0154 |
vulnerable | 2026-06-08 04:44:57.957351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.