Microsoft: >> Internet Information Server >> 4.0 Security Vulnerabilities
IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.
CVSS Score
5.0
EPSS Score
0.561
Published
1999-01-01
Information from SSL-encrypted sessions via PKCS #1.
CVSS Score
5.0
EPSS Score
0.051
Published
1998-06-26
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
CVSS Score
5.0
EPSS Score
0.761
Published
1998-06-01
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
CVSS Score
7.0
EPSS Score
0.004
Published
1998-02-06
Page 10