CVE-2003-1566

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-16

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 15, 2009
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2003

CVE-2003-15677.5The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body oCVE-2003-15685.0GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalCVE-2003-15695.0GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP reqCVE-2003-15703.5The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the sCVE-2003-15715.0Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowCVE-2003-15729.3Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unautCVE-2003-157310.0The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programCVE-2003-15747.5TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related toCVE-2003-15754.6VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inherCVE-2003-157610.0Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allCVE-2003-15772.6Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remoteCVE-2003-15784.3Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote
CVE-2003-1566: Medium severity, CVSS 5.0 | Vulnix