cve/2001/CVE-2001-0506.md

CVE-2001-0506

Description

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.