|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
Microsoft Site Server contains a flaw that may allow a remote denial of service. The issue is due to the /Sites/Publishing/Users/ directory which has write permissions by default. It is possible for a remote attacker with a valid NT account to arbitrarily upload overly large files and consume all available space on the system drive resulting in a loss of availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: Remove write access from the directories.
|
|
Products |
|
Site Server
 |
3.0 Standard Edition |
3.0 Commerce Edition |
|
|
|
|
|
|
Credit |
- RFP - rfp
 wiretrip.net - RFP Labs
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
