CVE-2005-4360 The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2005-4360?
CVE-2005-4360 is a high-severity vulnerability in Microsoft Internet Information Services, published on 20 Dec 2005.
Official description
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).
Weakness: CWE-252
Which versions are affected by CVE-2005-4360?
It affects 1 product.
Products include Microsoft Internet Information Services.
How do I fix CVE-2005-4360?
No fix has been published for CVE-2005-4360 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-4360 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-4360 exists.
Public exploit code: 2 Exploit-DB entries.
Other vulnerabilities in Microsoft Internet Information Services
- CVE-2017-7269 Microsoft Windows Server Buffer Overflow
- CVE-2010-3972 Memory corruption in n/a
- CVE-2008-4301 Other in n/a
- CVE-2007-2815 The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL
- CVE-2003-0224 Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa
Sources
Also known as GHSA-5jvw-5r9c-59q7.