https://www.exploit-db.com/exploits/20309
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199709-008

IIS3.0是一款WindowsNT/2000系统自带的的Web服务器软件，由Microsoft公司开发维护。默认安装的IIS3.0带了一个缺省示例CGI程序/scripts/tools/newdsn.exe。newdsn.exe实现上存在一个漏洞，允许攻击者通过提交一个特意构造的URL请求来覆盖任意文件。如果系统的NTFS权限设置不够严格，攻击者可能在系统中任何位置创建文件，或覆盖现存数据库的DSN。这可能导致拒绝服务攻击或其他后果。

source: http://www.securityfocus.com/bid/1818/info

Microsoft IIS 3.0 came with a sample program, newdsn.exe, installed by default in the directory wwwroot/scripts/tools/. Execution of this program with a properly submitted URL could allow for remote file creation. The file created is a Microsoft Access Database, but can have any extension, including .html.

http://vulnerable.site.comtools/newdsn.exe?driver=Microsoft%2BAccess%2BDriver%2B%28*.mdb%29&dsn=Evil+samples+from+microsoft&dbq=..%2F..%2Fwwwroot%2Fevil.html&newdb=CREATE_DB

来源:OSVDB
名称:275
链接:http://www.osvdb.org/275