MS Index Server and Indexing Service ISAPI Extension Buffer Overflow Vulnerability

Solution:
Microsoft has released a patch. Please see the references for details.

NOTE: Reports indicate that post-patch systems may be vulnerable to a denial of service; administrators are advised to reapply the newer patch if it is not installed and to remove the .ida/.idq mappings.

Microsoft has released the following tool that rectifies the damage caused by the 'Code Red II' worm:

http://www.microsoft.com/technet/itsolutions/security/tools/redfix.asp


Microsoft Index Server 2.0

Microsoft Indexing Services for Windows 2000


 

Privacy Statement
Copyright 2010, SecurityFocus