CVE-2005-2678

No fix known EPSS 42%

Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.

Published 2005-08-23 · CVE record · OSV

Products: microsoft internet_information_server, microsoft internet_information_services