CVE-2003-1566

Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-01-15

Last modified

2024-08-08

Weaknesses

CWE-16

Affected products

• Internet Information Services (Microsoft)

References

• http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html
• http://www.aqtronix.com/Advisories/AQ-2003-02.txt
• http://www.osvdb.org/4864
• http://www.securityfocus.com/bid/9313
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14077