Information Leak Vulnerability in IIS by Microsoft

CVE-2002-0419

Summary

The vulnerability in Microsoft Internet Information Services (IIS) 4 through 5.1 arises from improper handling of authentication responses, which can unintentionally expose sensitive information. In certain configurations, if a server's IP address is used as the realm for Basic authentication, it may disclose concealed real IP addresses that are typically hidden by NAT. Additionally, the use of NTLM authentication may reveal the server's NetBIOS name and Windows NT domain in response to an Authorization request. These information leaks could significantly aid potential attackers in conducting brute force attacks or gathering sensitive details about the server's environment.

References