Secunia

Microsoft has issued an update for Windows Media Services on Windows 2000 (Internet Information Services 5.0) due to a vulnerability allowing malicious people to gain system access.

The problem is that a buffer overflow exists in the logging facility "nsiislog.dll", which is part of Windows Media Services. It may be exploited by sending a malicious HTTP request.

Only Internet Information Services on Windows 2000 with Windows Media Services enabled is vulnerable (not enabled by default).

Solution
A patch is available:
Further details available in Customer Area

Provided and/or discovered by
Brett Moore

Changelog
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/Bulletin/MS03-022.mspx

Deep Links
Links available in Customer Area