scoutt

(August 31, 2009)
Proof-of-concept exploit code has been published for a vulnerability in
Microsoft's Internet Information Services (IIS) server. The exploit
could allow attackers to gain root access to servers running IIS version
5 on Windows 2000 with Service Pack 4. The vulnerability also
reportedly affects IIS version 6. The vulnerability lies in IIS's File
Transfer Protocol (FTP) software; for an attack to be successful, users
would need to have FTP enabled. Microsoft is investigating the reports
of the vulnerability; the company says it is not aware of any active
attacks that exploit the flaw.
http://www.theregister.co.uk/2009/08..._bug_reported/
http://www.computerworld.com/s/artic...e=rss_security
http://www.h-online.com/security/FTP...--/news/114127
http://news.cnet.com/8301-13860_3-10...47-1009_3-0-20
http://isc.sans.org/diary.html?storyid=7039

__________________
Have a Script or Snippet you want to share?

WWW Standards: HTML 4.01, CSS2.1, CSS3, XHTML 1.0
PHP Standards: PHP Standards