NT IIS4 DoS - ExAir Sample Site Vulnerability

Bugtraq ID:	193
Class:	Unknown
CVE:
Remote:	Yes
Local:	Unknown
Published:	Jan 26 1999 12:00AM
Updated:	Jan 26 1999 12:00AM
Credit:	This vulnerability was posted to NTBugtraq mailing list by David Litchfield (Mnemonix)
Vulnerable:	Microsoft IIS 4.0 + Cisco Building Broadband Service Manager (BBSM) 5.0 + Cisco Building Broadband Service Manager (BBSM) 5.0 + Cisco Call Manager 3.0 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 + Cisco Call Manager 1.0 + Cisco ICS 7750 + Cisco ICS 7750 + Cisco IP/VC 3540 Video Rate Matching Module + Cisco IP/VC 3540 Video Rate Matching Module + Cisco Unity Server 2.4 + Cisco Unity Server 2.4 + Cisco Unity Server 2.3 + Cisco Unity Server 2.3 + Cisco Unity Server 2.2 + Cisco Unity Server 2.2 + Cisco Unity Server 2.0 + Cisco Unity Server 2.0 + Cisco uOne 4.0 + Cisco uOne 4.0 + Cisco uOne 3.0 + Cisco uOne 3.0 + Cisco uOne 2.0 + Cisco uOne 2.0 + Cisco uOne 1.0 + Cisco uOne 1.0 + Hancom Hancom Office 2007 0 + Hancom Hancom Office 2007 0 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.5 + Microsoft Windows NT 4.0 Option Pack + Microsoft Windows NT 4.0 Option Pack
Not Vulnerable:

NT IIS4 DoS - ExAir Sample Site Vulnerability

An IIS4 sample site "ExAir" has three ASP pages, that if called directly without having the sample site dlls running, will cause the server CPU to increase to 100%. These pages include:

Exair - root/search/advsearch.asp
Exair - root/search/query.asp
Exair -root/search/search.asp

NT IIS4 DoS - ExAir Sample Site Vulnerability

see discussion

NT IIS4 DoS - ExAir Sample Site Vulnerability

Solution:
Do not install sample sites when creating an IIS server. Delete all files and directories that contain sample site pages.

NT IIS4 DoS - ExAir Sample Site Vulnerability

References: