Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
BID:45542
Info
Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 45542 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3972 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2010 12:00AM |
| Updated: | Mar 08 2011 05:17PM |
| Credit: | Matthew Bergin |
| Vulnerable: |
Microsoft IIS 7.5 Microsoft IIS 7.0 Avaya Aura Conferencing 6.0 Standard |
| Not Vulnerable: | |
Discussion
Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
Microsoft IIS is prone to a buffer-overflow vulnerability affecting the application's FTP service.
Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the FTP service, resulting in denial-of-service conditions.
IIS 7.5 is vulnerable; other versions may also be affected.
Microsoft IIS is prone to a buffer-overflow vulnerability affecting the application's FTP service.
Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the FTP service, resulting in denial-of-service conditions.
IIS 7.5 is vulnerable; other versions may also be affected.
Exploit / POC
Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
The following proof-of-concept is available:
The following proof-of-concept is available:
Solution / Fix
Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Microsoft IIS 7.5
Microsoft IIS 7.0
Solution:
Updates are available. Please see the references for more information.
Microsoft IIS 7.5
-
Microsoft Windows6.1-KB2489256-x86.msu
http://www.microsoft.com/downloads/details.aspx?familyid=9DABD1D1-3F1E -46D1-B171-AAFD3F08D291 -
Microsoft Windows6.1-KB2489256-x64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=66FB4EFE-BCD3 -4E90-8E35-B013E014A952 -
Microsoft Windows6.1-KB2489256-ia64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=BFDDD539-C64F -4467-88EE-6BDFE645B478
Microsoft IIS 7.0
-
Microsoft ftp75_x86_kb2489256.cab
http://www.microsoft.com/downloads/details.aspx?familyid=DA9B7982-1C6B -45AC-8DD0-D7101BB83949 -
Microsoft ftp70_x64_kb2489256.cab
http://www.microsoft.com/downloads/details.aspx?familyid=E88D072F-0F5F -4C85-AD2F-91B9B8BF6B3A -
Microsoft ftp75_x64_kb2489256.cab
http://www.microsoft.com/downloads/details.aspx?familyid=6E4B9878-B5D2 -4025-8839-B41515932CF2 -
Microsoft ftp70_x86_kb2489256.cab
http://www.microsoft.com/downloads/details.aspx?familyid=C09CCC72-8F94 -416B-9A7F-ED16E90342A2
References
Microsoft IIS FTP Service Remote Buffer Overflow Vulnerability
References:
References:
- Assessing an IIS FTP 7.5 Unauthenticated Denial of Service Vulnerability (Microsoft)
- Microsoft IIS Homepage (Microsoft)
- MS11-004 Vulnerability in Internet Information Services (IIS) FTP Service Could (Avaya)
- Microsoft Security Bulletin MS11-004 (Microsoft)
- VU#842372 Microsoft IIS FTP server memory corruption vulnerability (US-CERT)