Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS 4.0 IISADMPWD可暴力猜解口令及可绕过安全策略漏洞
Vulnerability Description
Microsoft IIS是一个流行的基于Windows平台的WEB服务器。支持包括.htr在内的很多ISAPI映射。 IIS 4.0的/IISADMPWD目录下的一些.htr文件存在缺陷，可被攻击者用来暴力猜解系统口令或绕过安全策略更改口令。 在IIS 4.0中，WEB目录/IISADMPWD映射在%SystemRoot%\system32\iisadmpwd，其中包含几个存在安全问题的.htr文件。这些文件被设计用来允许系统管理员通过HTTP管理用户帐号口令，包括：achg.htr、aexp*.htr
CVSS Information
N/A
Vulnerability Type
N/A