Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS 4.0/5.0畸形.HTR请求拒绝服务攻击漏洞(MS00-031)
Vulnerability Description
IIS是一款Windows NT/2000系统自带的的Web服务器软件，由Microsoft公司开发维护。IIS支持对一些特定文件名后缀(如.ASP、.IDC、.HTR)的文件请求执行进一步的处理，当服务器接到此类文件的请求时，每种后缀的文件由一个特定的DLL文件处理。ISM.DLL用于处理.HTR、.STM、.IDC为后缀的文件请求。 IIS在处理畸形的.htr请求时会导致服务器CPU占用率100%，必须重新启动才能恢复功能。 包含在虚拟目录中的.htr程序允许用户远程更改口令。如果用户提交一个畸形的更
CVSS Information
N/A
Vulnerability Type
N/A