Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft IIS 4.0/5.0 Session ID Cookie Disclosure Vulnerability

Solution:
Microsoft has released patches which eliminate the vulnerability. Microsoft re-released the patches on November 20, 2000 because the original IIS 4.0 Alpha and IIS 5.0 x86 patch did not install properly. Those who applied the IIS 4.0 x86 patch do not need to take any further action because the patch did not contain an error. The IIS 4.0 Alpha patch is available from Microsoft Product Support Services.


Microsoft IIS 4.0

Microsoft IIS 5.0







 

Privacy Statement
Copyright 2009, SecurityFocus