Security
SHARE
Facebook X Pinterest WhatsApp

Microsoft Patches ‘Critical’ Vulnerability

Microsoft Corp. on Thursday called a newly discovered vulnerability in its Content Management Server 2001 ‘critical’ and issued a patch that will correct it and two other vulnerabilities in the Web site building and maintenance product. The company is recommending that administrators apply the patch immediately. The worst vulnerability lies in the software’s user authentication […]

Written By
SG
Sharon Gaudin
Aug 8, 2002
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

Microsoft Corp. on Thursday called a newly discovered vulnerability in its Content Management Server 2001 ‘critical’ and issued a patch that will correct it and two other vulnerabilities in the Web site building and maintenance product.

The company is recommending that administrators apply the patch immediately.

The worst vulnerability lies in the software’s user authentication function, according to Microsoft. At least one page included with the default Web server would allow a hacker to overrun the buffer, giving him control of the system the software is running on.

The scope of the vulnerability could be significantly reduced if the URL scan tool was deployed on the server. It is likely that in this case, the vulnerability could only be used for denial of service attacks.

The second vulnerability found in Content Management Server 2001 sits in the Web authoring feature. An attack could exploit the vulnerability to upload a program to the Web server and execute it. This wouldn’t give the attacker full control of the program, but it would give her a foothold to move forward from.

The third vulnerability lies in the software’s database feature, and allows an attacker to take any action on the database and run some operating system commands, as well. However, it would not give the attacker any administrative privileges on the server.

  SEE ALL
ARTICLES  
SG

Sharon Gaudin is a veteran technology journalist who has worked for the likes of Computerworld, InformationWeek, and Datamation. She has covered everything from the cloud, security, and social networking to software development, robotics, artificial intelligence, and hardware.

Recommended for you...

thumbnail AI in Cybersecurity: The Comprehensive Guide to Modern Security
Security
AI in Cybersecurity: The Comprehensive Guide to Modern Security
Liz Ticong
Apr 29, 2024
thumbnail What Is Cybersecurity? Definitions, Practices, Threats
Security
What Is Cybersecurity? Definitions, Practices, Threats
Liz Ticong
Apr 8, 2024
thumbnail How to Secure a Network: 9 Key Actions to Secure Your Data
Security
How to Secure a Network: 9 Key Actions to Secure Your Data
Liz Ticong
Mar 21, 2024
thumbnail 7 Best Data Security Software: Solutions For 2024
Security
7 Best Data Security Software: Solutions For 2024
Kezia Grace Jungco
Mar 20, 2024
Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

facebook
youtube
x

Company

About us Contact us Advertise with us

Categories

Trends Big Data Data Center AI Cloud Applications Mobile Open Source Security Storage

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

Terms of Service Privacy Policy California - Do Not Sell My Information