NUEVA VULNERABILIDAD, Microsoft Internet Information Services Remote Script Code Execution Vulnerability
Posted: 29/9/10 by komz in Etiquetas: IIS, microsoft, Microsoft Internet Information Services, Vulnerabilidades
0
Microsoft Internet Information Services (IIS) is prone to a vulnerability that lets attackers execute arbitrary code. The problem occurs because IIS fails to properly sanitize user-supplied input when parsing directory names.
An attacker may leverage this issue to execute arbitrary script code on an affected computer in the context of the webserver process.
Microsoft IIS 6.0 is vulnerable; other versions may also be affected.
REFERENCIA DE LA VULNERABILIDAD
Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para ayudar a mitigar los riesgos.
fuente: securityfocus.com
