CVE-2007-2815 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 73.4% (pctl 99)
Patch early
A public exploit exists.
Description
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 73.35% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-05-22 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet information services |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass | 2007-05-31 |
References
- http://osvdb.org/41091
- http://securityreason.com/securityalert/2725
- http://support.microsoft.com/kb/328832
- http://www.securityfocus.com/archive/1/469238/100/0/threaded
- http://www.securityfocus.com/bid/24105
- http://osvdb.org/41091
- http://securityreason.com/securityalert/2725
- http://support.microsoft.com/kb/328832
- http://www.securityfocus.com/archive/1/469238/100/0/threaded
- http://www.securityfocus.com/bid/24105
→ the Explorer · watch your stack · NVD