Description

Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.

Remediation

References

CVE-2003-1566

Related Vulnerabilities

WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9466)

WordPress Plugin Sell Photo Cross-Site Scripting (1.0.5)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-18679)

LimeSurvey Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3752)

Severity

Medium

Classification

CVE-2003-1566

Tags

Missing Update Known Vulnerabilities