When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.

The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts.

IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request.

In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension.

A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.

IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.

Denial of service in IIS using long URLs.

In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.

IIS newdsn.exe CGI script allows remote users to overwrite files.

Information from SSL-encrypted sessions via PKCS #1.