Description
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.
Affected products
- Microsoft / site_server2.0 – 2.0
References
- MAILING_LISThttp://marc.info/?l=bugtraq&m=91763097004101&w=2