CVE-2003-1582
Microsoft Internet Information Services 6.0 - Cross-Site Scripting via DNS Response Injection
Title source: llmDescription
Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
References (1)
Core 1
Core References
Exploit mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/313867
Scores
EPSS
0.1032
EPSS Percentile
95.3%
Details
CWE
CWE-79
Status
published
Products (1)
microsoft/internet_information_server
6.0
Published
Feb 05, 2010
Tracked Since
Feb 18, 2026