Web Server PROPFIND Method Internal IP Disclosure

low Nessus Plugin ID 12113

Language:

Synopsis

This web server leaks a private IP address through its WebDAV interface.

Description

The remote installation of IIS leaks a private IP address through the WebDAV interface. This may expose internal IP addresses that are usually hidden or masked behind a Network Address Translation (NAT) Firewall or proxy server.

This is typical of IIS installations that are not configured properly.

Solution

Consult Microsoft's KB article for steps to resolve the issue.

Plugin Details

Severity: Low

ID: 12113

File Name: propfind_internal_ip.nasl

Version: 1.31

Type: Remote

Family: Web Servers

Published: 3/18/2004

Updated: 5/14/2025

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

CVSS v2

Risk Factor: Low

Base Score: 2.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2002-0422

Vulnerability Information

CPE: cpe:/a:microsoft:internet_information_services

Vulnerability Publication Date: 3/5/2002

Reference Information

CVE: CVE-2002-0422

CWE: 200

Detections

Analytics