QwikSec

Security Database

CVE

CWE

Training

CVE-2008-4301

Published: Sep 29, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20080924 Internet Information Service remote set password

mailing-list

x_refsource_BUGTRAQ

20081002 Fwd: Internet Information Service remote set password

mailing-list

x_refsource_VIM

iis-iisext-weak-security(45587)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.