----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Microsoft IIS "SERVER_NAME" Variable Spoofing Vulnerability

SECUNIA ADVISORY ID:
SA16548

VERIFY ADVISORY:
http://secunia.com/advisories/16548/

CRITICAL:
Less critical

IMPACT:
Spoofing

WHERE:
>From remote

SOFTWARE:
Microsoft Internet Information Services (IIS) 5.x
http://secunia.com/product/39/
Microsoft Internet Information Services (IIS) 6
http://secunia.com/product/1438/

DESCRIPTION:
Inge Henriksen has discovered a vulnerability in Microsoft Internet
Information Services (IIS), which can be exploited by malicious
people to spoof certain information.

The vulnerability is caused due to an error when determining the
"SERVER_NAME" variable and can be exploited to spoof it via a
specially crafted HTTP request.

Successful exploitation may e.g. disclose parts of an ASP scripts'
source code or make it possible to bypass security checks performed
by a web application based on the "SERVER_NAME" variable.

The vulnerability has been confirmed in IIS 5.1 and has also been
reported in versions 5.0 and 6.0.

SOLUTION:
Don't make assumptions based on the "SERVER_NAME" variable in web
applications.

Don't use the default 500-100.asp error page, as it makes assumptions
based on the "SERVER_NAME" variable and may return script contents
when encountering errors.

PROVIDED AND/OR DISCOVERED BY:
Inge Henriksen

ORIGINAL ADVISORY:
http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------