CVE-2001-0506
Internet Information Server 4.0-5.0 - Local Privilege Escalation via SSI Long Filename Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-0506. PoCs published by Indigo.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Microsoft IIS 4.0 and 5.0 via Server Side Include (SSI) files. It generates a malicious SSI file that, when accessed, triggers a buffer overflow to execute arbitrary shellcode, providing a SYSTEM-level reverse shell to the attacker.
Description
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Microsoft IIS 4.0 and 5.0 via Server Side Include (SSI) files. It generates a malicious SSI file that, when accessed, triggers a buffer overflow to execute arbitrary shellcode, providing a SYSTEM-level reverse shell to the attacker.