CVE-2006-0026

Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).

Score

CVSS 2.0 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2006-07-11

Last modified

2024-08-07

Affected products

• Internet Information Server (Microsoft)
• Internet Information Services (Microsoft)

References

• http://archives.neohapsis.com/archives/bugtraq/2006-07/0316.html
• http://secunia.com/advisories/21006
• http://securitytracker.com/id?1016466
• http://www.kb.cert.org/vuls/id/395588
• http://www.osvdb.org/27152
• http://www.securityfocus.com/bid/18858
• http://www.us-cert.gov/cas/techalerts/TA06-192A.html
• http://www.vupen.com/english/advisories/2006/2752
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-034
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26796
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A435