Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS错误记录日志漏洞
Vulnerability Description
Microsoft IIS是一款由微软开发和维护的WEB服务程序。 Microsoft IIS在记录使用十六进制编码的请求存在问题，远程攻击者可以利用这个漏洞使IIS记录错误信息。 在IIS的日志文件中十六进制代码会转义成一个字符，如'/index%2easp'记录成'/index.asp'。问题是'%0A'服务程序会转译成新行，而%FF会记录成空格，使用这两个十六进制可以使攻击者伪造日志，让IIS把一条请求记录成两条日志，造成记录信息错误。
CVSS Information
N/A
Vulnerability Type
N/A