Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability

Bugtraq ID:	54276
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 03 2012 12:00AM
Updated:	Jul 03 2012 12:00AM
Credit:	coolkaveh
Vulnerable:	Microsoft IIS 7.5 Microsoft IIS 6.0 + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition
Not Vulnerable:

Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability

Microsoft IIS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to force the affected application to become unresponsive, denying service to legitimate users.

This issue affects IIS 6.0 and 7.5.

Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft IIS Multiple FTP Command Request Denial of Service Vulnerability

References:

• Microsoft IIS Homepage (Microsoft)