Microsoft IIS 5.0 – WebDAV Lock Method Memory Leak Denial of Service

Microsoft IIS 5.0 – WebDAV Lock Method Memory Leak Denial of Service

漏洞ID 1053532 漏洞类型
发布时间 2001-05-17 更新时间 2001-05-17
图片[1]-Microsoft IIS 5.0 – WebDAV Lock Method Memory Leak Denial of Service-安全小百科CVE编号 N/A
图片[2]-Microsoft IIS 5.0 – WebDAV Lock Method Memory Leak Denial of Service-安全小百科CNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/20854
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/2736/info

Microsoft IIS 5.0 is vulnerable to a denial of service attack.

A flaw in the WebDav extensions allow a remote attacker to carry out a DoS by repeatedly requesting nonexistent files via the HTTP LOCK method.

This leads to a complete consumption of memory resources, eventually crashing the host and requiring a restart.

LOCK /aaaaaaaaaaaaaaaaaaaaaaaaaa.htw HTTP/1.0

One way is to combine the attack with asp executions, eg.

GET /iisstart.asp?uc=a HTTP/1.0

相关推荐: OpenBSD ssh程序权限提升漏洞

OpenBSD ssh程序权限提升漏洞 漏洞ID 1206215 漏洞类型 格式化字符串 发布时间 2000-12-11 更新时间 2000-12-11 CVE编号 CVE-2000-0999 CNNVD-ID CNNVD-200012-007 漏洞平台 N/…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享