Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

ISS RealSecure Server Sensor SSL Denial Of Service Vulnerability

ISS Server Sensor is prone to a denial of service when handling a malicious request over SSL. This vulnerability could be exploited to crash the underlying Microsoft IIS web server. It should be noted that the service may be automatically restarted.

It is not known if this issue affects other platforms or can be exploited to crash other underlying web server implementations.

The researchers who discovered this vulnerability are currently investigating the possibility of exploiting this issue to execute arbitrary code, though sufficient details are not available regarding this at the time of writing. This BID will be updated if more details become available.







 

Privacy Statement
Copyright 2008, SecurityFocus