CVE-2005-2678 | BDVDB-2026-12277 Detail

Description#

Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12005-08-23Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.