VDB

GCVE-110-CERTCC-2003-288308

GCVE-110-CERTCC-2003-288308
Advisory PublishedCVSS 0.0/10
Vulnetix · Advisory published December 28, 2003
Microsoft Internet Information Server (IIS) servers support a HTTP method called TRACK. The HTTP TRACK method returns the contents of client HTTP requests in the entity-body of the TRACK response. This behavior could be leveraged by attackers to access sensitive information, such as cookies or authentication data, contained in the HTTP headers of the request.
Download JSON Open in Console

Risk Scores

CVSS 2.0
0.0/10
None · AV:--/AC:--/Au:--/C:--/I:--/A:--
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population4d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score0remediation_levelNot Defined (ND)report_confidenceNot Defined (ND)environmental_score0target_distributionNot Defined (ND)environmental_vectorCDP:Not Defined (ND)/TD:Not Defined (ND)/CR:Not Defined (ND)/IR:Not Defined (ND)/AR:Not Defined (ND)

Aliases

CVE-2003-1567

Transitive aliases

Cisco-SA-20140807-CVE-2003-1567GSD-2003-1567EUVD-2003-1557GHSA-52vj-29px-76m7

References

Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method
url
Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method
advisory
Microsoft Internet Information Server (IIS) vulnerable to cross-site scripting via HTTP TRACK method
advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›