• info
• discussion
• exploit
• solution
• references

NT IIS ASP Alternate Data Streams Vulnerability

Solution:
It is strongly recommended that users of IIS upgrade to the latest version.

Patches for other vendors are available at their repsective web sites.

The following fixes are available:


Microsoft IIS 3.0

• Microsoft iis3fixa.exe
  ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis3- datafix/iis3fixa.exe


• Microsoft iis3fixi.exe
  ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis3- datafix/iis3fixi.exe

Microsoft IIS 4.0

• Microsoft iis4fixa.exe
  ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis4- datafix/iis4fixa.exe


• Microsoft iis4fixi.exe
  ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis4- datafix/iis4fixi.exe