|
Home > Archive > IIS Server Security > December 2005 > Microsoft IIS Remote DoS .DLL Url exploit
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Microsoft IIS Remote DoS .DLL Url exploit
|
|
| bencr333 2005-12-22, 7:49 am |
| Does anybody know more information in regards to this vulnerability
disclaimed by Inge Henriksen?
"I have found that by doing a malformed anonymous HTTP request one can
remotely crash the IIS service process, inetinfo.exe, using just a simple
tool like a web browser."
More details on the vulnerability: http://ingehenriksen.blogspot.com/
Microsoft's response to this?
Suggestions to mitigate this vulnerability?
| |
|
|
|
|
|