|
Microsoft Internet Information Services WebDAV Buffer Overflow
|
|
Secunia Advisory:
|
SA8314
|
|
|
Release Date:
|
2003-03-17
|
|
Last Update:
|
2004-12-07
|
|
Popularity:
|
9,920 views
|
|
|
Critical:
|
Extremely critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Microsoft Internet Information Services (IIS) 5.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
A vulnerability has been reported in Microsoft IIS 5.0, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error within the "ntdll.dll" core system file. This can be exploited to cause a buffer overflow via the WebDAV component by sending an overly long, specially crafted WebDAV request to a vulnerable web server. WebDAV is enabled by default on IIS and exploitation does NOT require an attacker to be authenticated.
Since IIS runs as LocalSystem, successful exploitation grants an attacker immediate and full control of the compromised system.
According to digi.no, an exploit exists and has been exploited against some Pentagon web servers. Secunia has therefore rated this issue as extremely critical.
NOTE: The vulnerable file also exists on Windows NT 4.0 and Windows XP. However, the file is not known to be used by any application in a way that could be exploited.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
