| Package | Affected versions | Patched versions |
|---|---|---|
| internet information server | = 4.0 | |
| internet information services | = 5.0 |
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free