Test Kennung:	1.3.6.1.4.1.25623.1.0.902796
Kategorie:	Web Servers
Titel:	Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability - Active Check
Zusammenfassung:	Microsoft Internet Information Services (IIS) Webserver is; prone to an IP address disclosure vulnerability.
Beschreibung:	Summary: Microsoft Internet Information Services (IIS) Webserver is prone to an IP address disclosure vulnerability. Vulnerability Insight: The flaw is due to an error while processing 'GET' request. When MS IIS receives a GET request without a host header, the Web server will reveal the IP address of the server in the content-location field or the location field in the TCP header in the response. Vulnerability Impact: Successful exploitation will allow remote attackers to gain internal IP address or internal network name, which could assist in further attacks against the target host. Affected Software/OS: Microsoft IIS version 4.0, 5.0, 5.1 and 6.0. Solution: Apply the hotfix for IIS 6.0. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.