Kingcope has discovered a vulnerability in Microsoft Internet Information Services (IIS), which can be exploited by malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing recursive directory listing requests. This can be exploited to cause a stack overflow and crash the FTP service via a specially crafted request containing wildcard characters (e.g. "*").

Successful exploitation requires that at least one directory is placed under the FTP root.

The vulnerability is confirmed in IIS 5.1 for Windows XP SP3 and in IIS 6.0 for Windows Server 2003, and additionally reported in IIS 5.0 and 7.0.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Kingcope

Changelog
Further details available to Secunia VIM customers

Original Advisory
Microsoft (KB975254):
http://www.microsoft.com/technet/security/Bulletin/MS09-053.mspx

Kingcope:
http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0040.html

Microsoft:
http://www.microsoft.com/technet/security/advisory/975191.mspx

Deep Links
Links available to Secunia VIM customers