CVE-2005-4360

CVSS V2 High 7.8 CVSS V3 None
Description
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).
Overview
  • CVE ID
  • CVE-2005-4360
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2005-12-20T01:03:00
  • Last Modified Date
  • 2021-11-08T21:45:47
Weakness Enumerations
CWE URL
CWE-252 http://cwe.mitre.org/data/definitions/252.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:-:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:C/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • NONE
  • Base Score
  • 7.8
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.9
References
Reference URL Reference Tags
http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html Exploit Vendor Advisory
http://secunia.com/advisories/18106 Exploit Vendor Advisory
http://www.securityfocus.com/bid/15921 Third Party Advisory VDB Entry
http://securitytracker.com/alerts/2005/Dec/1015376.html Third Party Advisory VDB Entry
http://www.osvdb.org/21805 Broken Link
http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Issue Tracking Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA07-191A.html Third Party Advisory US Government Resource
http://securityreason.com/securityalert/271 Third Party Advisory
http://www.vupen.com/english/advisories/2005/2963 Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1703 Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-041 Patch Vendor Advisory
http://www.securityfocus.com/archive/1/419707/100/0/threaded Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2005-4360
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4360
History
Created Old Value New Value Data Type Notes
2022-05-10 06:47:54 Added to TrackCVE