Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Gain root remotely >> IIS FrontPage DoS II

Vulnerability Assessment Details

IIS FrontPage DoS II

Vulnerability Assessment Summary
Attempts to overflow the fp30reg.dll dll

Detailed Explanation for this Vulnerability Assessment

Microsoft IIS, running Frontpage extensions, is vulnerable to a remote
buffer overflow attack. A possible hacker, exploiting this bug, may gain
access to confidential data, critical business processes, and
elevated rights on the attached network.

Solution : Install either SP4 for Windows 2000 or apply the fix described
in Microsoft Bulletin MS03-051

See also : http://www.microsoft.com/technet/security/bulletin/MS03-051.mspx

Network Security Threat Level: High

Networks Security ID: 2906

Vulnerability Assessment Copyright: This script is Copyright (C) 2001 John Lampe

Cables, Connectors