|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
Description |
The Microsoft FrontPage 'dvwssr.dll' file contains a backdoor password and a flaw that allows anyone with web authoring permissions to change other user's files. It also has a buffer overflow that allows an attacker to run arbitrary commands.
|
|
Classification |
Attack Type:
Input Manipulation
|
|
Technical |
dvwssr.dll is a server-side component used to support the Link View feature in Visual Interdev 1.0 which contains an unchecked buffer. If overrun with data, it could be used to cause an affected server to crash, or could allow arbitrary code to run on the server in a System context.
|
|
Solution |
Set the permissions on the /_vti_bin/_vti_aut/ folder as: Administrators: Full Control, System: Full Control.
If you do not need FrontPage Server Extension authoring, delete dvwssr.dll. However, this may damage Interdev functionality.
|
|
Products |
|
FrontPage
 |
98 |
InterDev
|
1.0 |
|
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
