Detections
Analytics
IIS 5.x Alternate Data Stream Authentication Bypass
high Nessus Plugin ID 47594
Language:
Synopsis
The remote web server is affected by an authentication bypass vulnerability.Description
The version of IIS 5.x installed on the remote host is affected by an authentication bypass vulnerability. It is possible to access protected web directories without authentication through use of an Alternate Data Stream to open protected folders.A remote, unauthenticated attacker can leverage this issue to gain access to protected web directories.
Solution
Microsoft has released a set of patches for IIS 5.1.See Also
http://www.nessus.org/u?c4d2feac
Plugin Details
Severity: High
ID: 47594
File Name: iis_alternate_data_stream_authentication_bypass.nasl
Version: 1.30
Type: remote
Family: CGI abuses
Published: 7/5/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2010-2731
Vulnerability Information
CPE: cpe:/a:microsoft:iis
Required KB Items: www/ASP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 9/14/2010
Vulnerability Publication Date: 7/1/2010
Reference Information
CVE: CVE-2010-2731
BID: 41314