CVE-2005-2678
37Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 42%
from disclosure to weapon
Published on NVDAug 23
VulnCheck+4528d
exploitation probability
42%top 1% of all CVEs
observed exploitation
yesVulnCheck
Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.
Affected products
n/a · n/a