http://www.attrition.org/pipermail/vim/2008-October/002081.html

http://www.securityfocus.com/archive/1/496694/100/0/threaded

https://exchange.xforce.ibmcloud.com/vulnerabilities/45587

MITRE disputed

** DISPUTED **  A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method.  NOTE: this issue could not be reproduced by a reliable third party.  In addition, the original researcher is unreliable.  Therefore the original disclosure is probably erroneous.

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method.  NOTE: this issue could not be reproduced by a reliable third party.  In addition, the original researcher is unreliable.  Therefore the original disclosure is probably erroneous

NIST CWE-255

OR
     *cpe:2.3:a:microsoft:iis:*:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:microsoft:internet_information_services:-:*:*:*:*:*:*:*

http://www.attrition.org/pipermail/vim/2008-October/002081.html No Types Assigned

http://www.attrition.org/pipermail/vim/2008-October/002081.html Third Party Advisory

http://www.securityfocus.com/archive/1/496694/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/496694/100/0/threaded Exploit, Third Party Advisory, VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/45587 No Types Assigned

https://exchange.xforce.ibmcloud.com/vulnerabilities/45587 Broken Link

http://www.securityfocus.com/archive/1/496694/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/496694/100/0/threaded [Exploit]

https://exchange.xforce.ibmcloud.com/vulnerabilities/45587 [No Types Assigned]

http://xforce.iss.net/xforce/xfdb/45587 [No Types Assigned]

** DISPUTADA ** Cierto control ActiveX en iisext.dll en Microsoft Internet Information Services (IIS) permite a atacantes remotos establecer una contraseña a través de un argumento de tipo cadena en el método SetPassword. NOTA: un tercero de confianza no pudo reproducir este problema. En adición, el investigador original no es de confianza. Por lo tanto la divulgación original es probablemente errónea.

Cierto control ActiveX en iisext.dll de Microsoft Internet Information Services (IIS) permite a atacantes remotos establecer una contraseña mediante un argumento de tipo cadena en el método SetPassword.