Description

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."

Remediation

References

CVE-2009-3023

Related Vulnerabilities

WordPress Plugin Storefront Footer Text Cross-Site Scripting (1.0.1)

MediaWiki Other Vulnerability (CVE-2013-2114)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0791)

Jboss EAP CVE-2017-12189 Vulnerability (CVE-2017-12189)

WordPress Plugin WP Super Cache Cross-Site Scripting (1.4)

Severity

Critical

Classification

CVE-2009-3023 CWE-120

Tags

Missing Update Known Vulnerabilities