Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft IIS HTR ISAPI Extension Buffer Overflow Vulnerability

A buffer overflow in the HTR ISAPI extension has been reported for Microsoft IIS (Internet Information Services).

This condition affects IIS 4.0, IIS 5.0 and may be effectively mitigated by disabling the extension.

Exploitation of this vulnerability may result in a denial of service or allow for a remote attacker to execute arbitrary instructions on the victim host.

A number of Cisco products are affected by this vulnerability, although this issue is not present in the Cisco products themselves.







 

Privacy Statement
Copyright 2009, SecurityFocus