| Package | Affected versions | Patched versions |
|---|---|---|
| internet information server | = 3.0= 4.0 | |
| internet information services | = 2.0= 5.0 |
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free