Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."

According to the HTTP server banner the remote server is IIS 7.0. The server may be vulnerable to a number of vulnerabilities including a couple of remote code execution vulnerabilities.

The remote host contains a version of Windows that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code on the remote host via an integer overflow in the internet printing service.

ID	Name	Product	Family	Type	Severity
108808	Microsoft IIS 7.0 Vulnerabilities (uncredentialed) (PCI/DSS)	Nessus	Web Servers	Remote	high
34407	MS08-062: Microsoft IIS IPP Service Unspecified Remote Overflow (953155)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2008-1446

high

Tenable Plugins

high

high