iis_xss_idc.nasl

漏洞扫描源码,可以扫描linux,windows,交换机路由器

#
# This script was written by Geoffroy Raimbault <[e-mail]>
#
# www.lynx-technologies.com
#
# See the Nessus Scripts License for details
#


if(description)
{
 script_version ("$Revision: 38 $");
 script_id(11142);
 script_bugtraq_id(5900);
 name["english"] = "IIS XSS via IDC error";
 name["francais"] = "IIS XSS via une erreur IDC";
 script_name(english:name["english"], francais:name["francais"]);

 desc["english"] = "
This IIS Server appears to be vulnerable to a Cross
Site Scripting due to an error in the handling of overlong requests on
an idc file. It is possible to inject Javascript
in the URL, that will appear in the resulting page.

Risk factor : Medium

See also : http://online.securityfocus.com/bid/5900
           http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=1391
 ";

 script_description(english:desc["english"]);

 summary["english"] = "Tests for IIS XSS via IDC errors";
 summary["francais"] = "Test de la vuln閞abilit