Microsoft Windows IIS FTP server buffer overflow updated since 31.08.2009
Published:		13.10.2009
Source:		FULL-DISCLOSURE
SecurityVulns ID:		10193
Type:		remote
Level:		8/10
Description:		Buffer overflow in NLST command. Same vulnerability may be used for stack overflow (stack memory exhaustion) without need fo write access.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
		MICROSOFT : Windows 2008 Server

Original document		MICROSOFT, Microsoft Security Bulletin MS09-053 - Important Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254) (13.10.2009)
		Kingcope Kingcope, Microsoft Internet Information Services 5.0/6.0 FTP SERVER DENIAL OF SERVICE ("Stack Exhaustion") (04.09.2009)

Files:		IIS 5.0 FTPd / Remote r00t exploit
		Microsoft Internet Information Server ftpd zeroday
		Microsoft Security Bulletin MS09-053 - Important Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)
Discuss:		Read or add your comments to this news (0 comments)