[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Security feature bypass vulnerability in Microsoft IIS - CVE-2014-4078

ID: oval:org.secpod.oval:def:21562Date: (C)2014-11-12   (M)2021-09-11
Class: VULNERABILITYFamily: windows




The host is installed with Microsoft Internet information services 8.0 or 8.5 and is prone to security feature bypass vulnerability. A flaw is present in the application, which improperly compare incoming web requests against the "IP and domain restriction" filtering list. Successful exploitation could allow attackers to access a website that an IIS administrator believed was restricted.

Platform:
Microsoft Windows 8
Microsoft Windows Server 2012
Microsoft Windows 8.1
Microsoft Windows Server 2012 R2
Product:
Microsoft Internet Information Services 8.0
Microsoft Internet Information Services 8.5
Reference:
CVE-2014-4078
CVE    1
CVE-2014-4078
CPE    11
cpe:/o:microsoft:windows_8
cpe:/o:microsoft:windows_8:-:-:x64
cpe:/o:microsoft:windows_8:-:-:x86
cpe:/o:microsoft:windows_server_2012::r2:x64
...

© SecPod Technologies