EDB-20096

functional

Microsoft IIS 2.0/3.0/4.0/5.0/5.1 - Internal IP Address Disclosure

view exploit source exploit_dbverifiedtype remoteauthor Dougal Campbellpublished 2000-07-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2000-0649USlow2.6Exploit
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm d…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan