HTTP: IIS Index service Cross site scripting

This signature detects attempts to exploit a known vulnerability against Microsoft Indexing Service. A successful attack allows the attacker to perform cross-site scripting.

Extended Description

Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other users. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user, in the context of the victim's session. This could allow the attacker to perform actions on behalf of the victim, such as spoofing content or hijacking their session. Microsoft Indexing Service is not installed or enabled by default. Even if installed, it is not accessible from Internet Information Services (IIS). This vulnerability affects only systems that have IIS and Indexing Service installed and that have the Indexing Service configured to be accessible from IIS through a web-based interface.

Affected Products

Microsoft windows_xp_media_center_edition

References

BugTraq: 19927

CVE: CVE-2006-0032

URL: http://www.microsoft.com/technet/security/bulletin/MS06-053.mspx

Short Name

HTTP:IIS:X-SITE-SCRIPT

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: IIS Index service Cross site scripting

Extended Description

Affected Products

References

Found a potential security threat?