CVE-2003-1566

Description

Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.

Affected Platforms

Weakness Type

CWE-16

References

• http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html
• http://www.aqtronix.com/Advisories/AQ-2003-02.txt
• http://www.osvdb.org/4864
• http://www.securityfocus.com/bid/9313
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14077
• http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.html