CVE-2004-0574

Related Files

Core Security Technologies Advisory 2004.0802

Posted Oct 13, 2004

Authored by Core Security Technologies, Lucas Lavarello, Juliano Rizzo | Site coresecurity.com

Core Security Technologies Advisory ID: CORE-2004-0802 - Microsoft IIS provides organizations using it with the ability to service and route news using the Network News Transfer Protocol (NNTP) with the Microsoft NNTP service listening on port 119/tcp, and optionally on port 563/tcp for SSL encrypted connections. Multiple vulnerabilities were found in Microsoft IIS that could allow an attacker to execute arbitrary commands on vulnerable systems running the Microsoft IIS NNTP service.

tags | advisory, arbitrary, tcp, vulnerability, protocol

advisories | CVE-2004-0574

SHA-256 | 7b01fd77323cb00294467c5222071074dff2361a56225c284762a06529f677e0

Download | Favorite | View