oval:org.mitre.oval:def:58

Definition Id: oval:org.mitre.oval:def:58

Oval ID:	oval:org.mitre.oval:def:58
Title:	DEPRECATED: Windows NT IIS HTTP Redirect Error Message Cross-site Scripting
Description:	Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-0075	Version:	2
Platform(s):	Microsoft Windows NT	Product(s):	Microsoft Internet Information Server (IIS)
Definition Synopsis:
IIS 4.0 Major Version AND IIS minor version equals 0 AND NOT this is an NT Terminal Server AND the version of w3svc.dll is less than 4.2.775.1 AND NOT Patch Q319733 Installed AND NOT Patch Q327696 Installed AND NOT Patch Q811114 Installed