Executive Summary

Title Vulnerability in Internet Information Services (IIS) Could Allow Security Feature Bypass (2982998)
Name MS14-076 First vendor Publication 2014-11-11
Vendor Microsoft Last vendor Modification 2014-12-19
Severity (Vendor) Important Revision 1.1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:P/I:P/A:P)
Cvss Base Score 5.1 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity High
Cvss Expoit Score 4.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Severity Rating: Important
Revision Note: V1.1 (December 19, 2014): V1.1 (December 19, 2014): Bulletin revised to include Windows 2012 Server Core installation and Windows 2012 R2 Server Core installation as affected software.
Summary: This security update resolves a privately reported vulnerability in Internet Microsoft Information Services (IIS) that could lead to a bypass of the "IP and domain restrictions" security feature. Successful exploitation of this vulnerability could result in clients from restricted or blocked domains having access to restricted web resources.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS14-076

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:27909
Oval ID: oval:org.mitre.oval:def:27909
Title: IIS Security feature bypass vulnerability - CVE-2014-4078 (MS14-076)
Description: The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."
Family: windows Class: vulnerability
Reference(s): CVE-2014-4078
Version: 3
Platform(s): Microsoft Windows 8
Microsoft Windows Server 2012
Microsoft Windows 8.1
Microsoft Windows Server 2012 R2
Product(s): Microsoft Internet Information Services 8.0
Microsoft Internet Information Services 8.5
Definition Synopsis:

CPE : Common Platform Enumeration

Application 2

Information Assurance Vulnerability Management (IAVM)

Date Description
2014-11-13 IAVM : 2014-B-0146 - Vulnerability in Microsoft Internet Information Services (IIS)
Severity : Category II - VMSKEY : V0057359

Nessus® Vulnerability Scanner

Date Description
2014-11-12 Name : The remote Windows host is affected by a security feature bypass vulnerability.
File : smb_nt_ms14-076.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
Date Informations
2015-10-18 17:26:24
  • Multiple Updates
2015-01-01 00:25:49
  • Multiple Updates
2014-12-20 00:26:20
  • Multiple Updates
2014-12-20 00:15:56
  • Multiple Updates
2014-11-12 17:27:17
  • Multiple Updates
2014-11-12 13:27:29
  • Multiple Updates
2014-11-12 05:34:52
  • Multiple Updates
2014-11-11 21:28:12
  • Multiple Updates
2014-11-11 21:16:52
  • First insertion