|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
IIS contains a flaw that may allow a remote denial of service. The issue is triggered by a status request which creates an error condition which is not correctly reported. Other FTP daemon code will attempt to utilize the uninitialized data which causes an access violation. This results not only in loss of availability for the FTP service, but other web services as well.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Technical |
In order to recover from this DoS, the IIS service must be restarted manually on for version 4.0, while the service would automatically restart in IIS 5.0.
|
|
Solution |
Install Patch Q319733, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround:
Disable FTP - The IIS Lockdown Tool disables FTP by default.
|
|
Products |
|
IIS
 |
4.0 |
5.0 |
5.1 |
|
|
|
|
|
|
Credit |
- H D Moore - fdlist
 digitaloffense.net - The Metasploit Project
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
