Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS 4.0远程Web管理ism.dll文件可被利用暴力猜解漏洞
Vulnerability Description
IIS 4.0是一款Windows NT系统自带的的Web服务器软件，由Microsoft公司开发维护。 由低版本IIS升级的IIS 4.0有一个文件ism.dll未被删除，此程序可用于远程管理IIS服务，远程攻击者可能利用此程序穷举口令。 默认安装的IIS 4.0中包含远程WEB管理组件，可以通过浏览器管理IIS服务。但是仅限于通过环回地址(127.0.0.1)访问。如果IIS 4.0是从IIS 2.0或者IIS 3.0基础上升级的，那么在/scripts/iisadmin目录下会留下一个ism.dll
CVSS Information
N/A
Vulnerability Type
N/A