Signature Detail
Short Name |
HTTP:IIS:LOCALHOST-SPOOF |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
IIS Localhost SERVER_NAME Spoofing |
Release Date |
2005/11/30 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: IIS Localhost SERVER_NAME Spoofing
This signature detects attempts to exploit a known vulnerability against Microsoft's Internet Information Server version 5.0 and 6.0. An attacker can access sensitive server information by spoofing their hostname to "localhost" in a URL request. This information could be used to make other attacks more effective.
Extended Description
None
References