CVE-2007-2815
high · 10The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
10
CVSS
73.4%
EPSS (exploit prob.)
99th
EPSS percentile
2007-05-22
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_information_services | 5.0 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/41091
- http://securityreason.com/securityalert/2725
- http://support.microsoft.com/kb/328832
- http://www.securityfocus.com/archive/1/469238/100/0/threaded
- http://www.securityfocus.com/bid/24105
- http://osvdb.org/41091
- http://securityreason.com/securityalert/2725
- http://support.microsoft.com/kb/328832
- http://www.securityfocus.com/archive/1/469238/100/0/threaded
- http://www.securityfocus.com/bid/24105
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-2815