oval:org.mitre.oval:def:81

Definition Id: oval:org.mitre.oval:def:81

Oval ID:	oval:org.mitre.oval:def:81
Title:	DEPRECATED: Windows NT IIS HTTP Error Page Cross-site Scripting
Description:	Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-0148	Version:	2
Platform(s):	Microsoft Windows NT	Product(s):	Microsoft Internet Information Server (IIS)
Definition Synopsis:
IIS 4.0 Major Version AND IIS minor version equals 0 AND NOT this is an NT Terminal Server AND the version of w3svc.dll is less than 4.2.775.1 AND NOT Patch Q319733 Installed AND NOT Patch Q327696 Installed AND NOT Patch Q811114 Installed