Security bypass vulnerability in Microsoft IIS

Description

Improper wildcard processing was found in Microsoft IIS. By exploiting this vulnerability malicious users can bypass intended rules. This vulnerability can be exploited remotely via a specially designed HTTP request.

Original advisories

• CVE-2014-4078

Related products

• Microsoft-Internet-Information-Services

CVE list

• CVE-2014-4078
  high

KB list

• 2982998

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com