CVE-2008-4301

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services (IIS) allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable. Therefore the original disclosure is probably erroneous

• http://www.attrition.org/pipermail/vim/2008-October/002081.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/496694/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45587Broken Link
• http://www.attrition.org/pipermail/vim/2008-October/002081.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/496694/100/0/threadedExploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45587Broken Link

Published

Sep 29, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4295Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 812…
• CVE-2008-4296The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" …
• CVE-2008-4297Mercurial before 1.0.2 does not enforce the allowpull permis…
• CVE-2008-4298Memory leak in the http_request_parse function in request.c …
• CVE-2008-4299A certain ActiveX control in the Microsoft Internet Authenti…
• CVE-2008-4300A certain ActiveX control in adsiis.dll in Microsoft Interne…
• CVE-2008-4302fs/splice.c in the splice subsystem in the Linux kernel befo…5.5
• CVE-2008-4303Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3,…
• CVE-2008-4304general/login.php in phpCollab 2.5 rc3 and earlier allows re…
• CVE-2008-4305Static code injection vulnerability in installation/setup.ph…
• CVE-2008-4306Buffer overflow in enscript before 1.6.4 has unknown impact …
• CVE-2008-4307Race condition in the do_setlk function in fs/nfs/file.c in …