Detections
Analytics
MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)
medium Nessus Plugin ID 49223
Language:
Synopsis
The remote web server may allow remote code execution.Description
The version of IIS installed on the remote host has the following vulnerabilities :- Sending a specially crafted request for an ASP page on a website hosted by IIS can result in a denial of service. (CVE-2010-1899)
- Sending a specially crafted HTTP request to an IIS server with FastCGI enabled can result in remote code execution. (CVE-2010-2730)
- Sending a specially crafted request to an IIS server running on Windows XP can allow a remote attacker to bypass the need to authenticate to access restricted resources. (CVE-2010-2731)
Solution
Microsoft has released a set of patches for IIS on Windows XP, 2003, Vista, 2008, 7, and 2008 R2.See Also
Plugin Details
Severity: Medium
ID: 49223
File Name: smb_nt_ms10-065.nasl
Version: 1.29
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 9/14/2010
Updated: 8/5/2020
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/14/2010
Vulnerability Publication Date: 7/2/2010
Exploitable With
Core Impact