This script is Copyright (C) 2003-2013 Tenable Network Security, Inc.
Arbitrary code can be executed on the remote web server.
The remote host is running a version of IIS that contains various flaws
that could allow remote attackers to disable this service remotely and
local attackers (or remote attackers with the ability to upload
arbitrary files on this server) to gain SYSTEM level access on this
See also :
Microsoft has released a set of patches for IIS 4.0, 5.0 and 5.1.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.7
Public Exploit Available : true