Re: CA-2003-09 Buffer Overflow in Microsoft IIS 5.0

Article View: be.comp.security

Article #1493

#1493

From: Filbert
Date: Thu, 20 Mar 2003 11:25

22 lines
2079 bytes

Jan Reilink wrote:

> [Notice the crosspost! Sorry guys/gals]
> 
> http://www.cert.org/advisories/CA-2003-09.html
> " A buffer overflow vulnerability exists in Microsoft IIS
> 5.0 running on Microsoft Windows 2000. IIS 5.0 is installed
> and running by default on Microsoft Windows 2000 server
> products. This vulnerability may allow a remote attacker to
> run arbitrary code on the victim machine.
>  

Er werd al verschillende malen melding gemaakt (oa. op Bugtraq) over problemen 
met de patch:

http://www.computerworld.com/securitytopics/security/story/0,10801,79504,00.html


-- 
FilbertAtPandoraDotBe
  "A foolish faith in authority is the worst enemy of truth."
                                             - A. Einstein -

Technical Details

Message-ID: <Dyhea.20579$Vq.1799@afrodite.telenet-ops.be>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!iad-peer.news.verio.net!news.verio.net!skynet.be!skynet.be!ossa.telenet-ops.be!afrodite.telenet-ops.be.POSTED!not-for-mail

References: <3E764949.3070900@dsinet.org>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 113446,f8f787ca1e5b43ac
X-Google-Attributes: gid113446,public
X-Google-Thread: 115ed4,f8f787ca1e5b43ac
X-Google-Attributes: gid115ed4,public
X-Google-Thread: 102c45,f8f787ca1e5b43ac
X-Google-Attributes: gid102c45,public
X-Google-Thread: fbc6f,f8f787ca1e5b43ac
X-Google-Attributes: gidfbc6f,public
X-Google-ArrivalTime: 2003-03-20 03:25:51 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-09!supernews.com!iad-peer.news.verio.net!news.verio.net!skynet.be!skynet.be!ossa.telenet-ops.be!afrodite.telenet-ops.be.POSTED!not-for-mail
From: Filbert <LookInMyDamn@Sig.edu>
Subject: Re: CA-2003-09 Buffer Overflow in Microsoft IIS 5.0
Newsgroups: be.comp.security,alt.hacker,alt.hacking,alt.hack.nl
Followup-To: be.comp.security
References: <3E764949.3070900@dsinet.org>
Lines: 22
Organization: Hell
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
X-Newsreader: Go_To_Hell_3.2
Message-ID: <Dyhea.20579$Vq.1799@afrodite.telenet-ops.be>
Date: Thu, 20 Mar 2003 11:25:23 GMT
NNTP-Posting-Host: 213.224.99.18
X-Complaints-To: abuse@telenet.be
X-Trace: afrodite.telenet-ops.be 1048159523 213.224.99.18 (Thu, 20 Mar 2003 12:25:23 MET)
NNTP-Posting-Date: Thu, 20 Mar 2003 12:25:23 MET

Reply to Parent Message