CVE-2001-0333

This Metasploit module exploits the CGI double-decode vulnerability in Microsoft IIS/PWS to execute arbitrary commands by leveraging improper URL decoding. It copies cmd.exe to the web root and executes payloads via HTTP requests.

This exploit targets a CGI filename decode vulnerability in Microsoft IIS (CVE-2001-0333), allowing remote command execution via double-decoding of malformed filenames. The PoC sends a crafted HTTP GET request to execute arbitrary commands with IUSR_machinename privileges.

This is a detailed writeup describing a vulnerability in IIS where a flaw in CGI filename handling allows remote command execution due to double decoding. The vulnerability is exploited by malformed filenames bypassing security checks.

The writeup describes a flaw in IIS CGI filename handling where double decoding of malformed requests can lead to arbitrary command execution with IUSR_machinename privileges. This vulnerability is exploited by the Nimda worm and affects Personal Web Server 1.0 and 3.0.

The writeup describes a vulnerability in IIS where a flaw in CGI filename handling allows remote command execution due to double decoding of malformed filenames. This bypasses security checks and executes commands with IUSR_machinename privileges.

This exploit leverages a double-decoding flaw in IIS CGI handling to execute arbitrary commands via a malformed request. The script constructs a GET request with encoded traversal sequences to bypass security checks and execute `cmd.exe`.

This exploit targets a double-decoding vulnerability in Microsoft IIS (CVE-2001-0333) to achieve remote command execution. It crafts a malformed HTTP GET request with encoded traversal sequences to bypass security checks and execute arbitrary commands via cmd.exe.

This Perl script exploits CVE-2001-0333, a double-decoding flaw in IIS 4/5 CGI handling, allowing remote command execution via malformed requests. It tests for vulnerability, copies cmd.exe if needed, and executes arbitrary commands.

This exploit leverages a CGI filename decode error in Microsoft IIS to execute arbitrary commands via a malformed request. The vulnerability arises from double-decoding of the CGI filename, bypassing security checks.

This Metasploit module exploits the CGI double-decode vulnerability in Microsoft IIS/PWS (CVE-2001-0333) to achieve remote command execution. It leverages directory traversal via encoded sequences to access cmd.exe and execute arbitrary commands or drop a payload.