Microsoft IIS FTP Denial of Service Vulnerability

Bugtraq ID:	2717
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 14 2000 12:00AM
Updated:	May 14 2000 12:00AM
Credit:	Discovered by Lukasz Luzar <[email protected]> and posted in Microsoft Security Bulletin MS01-026 on May 14, 2001.
Vulnerable:	Microsoft IIS 5.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server SP1 + Microsoft Windows 2000 Advanced Server + Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 + Microsoft Windows 2000 Professional + Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server SP1 + Microsoft Windows 2000 Server + Microsoft Windows 2000 Server Microsoft IIS 4.0 + Cisco Building Broadband Service Manager (BBSM) 5.0 + Cisco Building Broadband Service Manager (BBSM) 5.0 + Cisco Call Manager 3.0 + Cisco Call Manager 3.0 + Cisco Call Manager 2.0 + Cisco Call Manager 2.0 + Cisco Call Manager 1.0 + Cisco Call Manager 1.0 + Cisco ICS 7750 + Cisco ICS 7750 + Cisco IP/VC 3540 Video Rate Matching Module + Cisco IP/VC 3540 Video Rate Matching Module + Cisco Unity Server 2.4 + Cisco Unity Server 2.4 + Cisco Unity Server 2.3 + Cisco Unity Server 2.3 + Cisco Unity Server 2.2 + Cisco Unity Server 2.2 + Cisco Unity Server 2.0 + Cisco Unity Server 2.0 + Cisco uOne 4.0 + Cisco uOne 4.0 + Cisco uOne 3.0 + Cisco uOne 3.0 + Cisco uOne 2.0 + Cisco uOne 2.0 + Cisco uOne 1.0 + Cisco uOne 1.0 + Hancom Hancom Office 2007 0 + Hancom Hancom Office 2007 0 + Microsoft BackOffice 4.5 + Microsoft BackOffice 4.5 + Microsoft Windows NT 4.0 Option Pack + Microsoft Windows NT 4.0 Option Pack
Not Vulnerable:

Microsoft IIS FTP Denial of Service Vulnerability

Due to a flaw in the pattern-matching function used by FTP commands, denial of service attacks can be successfully launched. If a user submits an FTP command along with a filename containing specially placed wildcard sequences, the pattern-matching function will not allocate sufficent memory. Resulting in IIS experiencing denial of service condition.

Microsoft IIS FTP Denial of Service Vulnerability

Critical Watch Bugtraqqer <[email protected]> has provided the following exploit:

• /data/vulnerabilities/exploits/wildcard_dos.pl

Microsoft IIS FTP Denial of Service Vulnerability

Solution:
Microsoft has released a patch which rectifies this issue:


Microsoft IIS 4.0

• Microsoft Q295534
  http://download.microsoft.com/download/winntsp/Patch/q293826/NT4/EN-US /Q295534i.exe


• Microsoft Q295534
  Install both IIS 4.0 patches.
  http://download.microsoft.com/download/winntsp/Patch/q293826/NT4/EN-US /Q295534is.exe

Microsoft IIS 5.0

• Microsoft Q293826
  http://download.microsoft.com/download/win2000platform/Patch/q293826/N T5/EN-US/Q293826_W2K_SP3_x86_en.EXE

Microsoft IIS FTP Denial of Service Vulnerability

References:

• Microsoft Security Bulletin MS02-026 (Microsoft)