Download the authoritative guide: Cloud Computing 2019: Using the Cloud for Competitive Advantage
The Computer Emergency Response Team (CERT/CC) on Monday issued an advisory
for a buffer overflow vulnerability in Microsoft IIS 5.0 running on
Microsoft Windows 2000, warning sysadmins that an exploit is already
circulating.
Microsoft issued a "critical" rating on the flaw and issued a patch while warning that the
vulnerability may allow a remote attacker to run arbitrary code on an
infected machine.
"An exploit is publicly available for this vulnerability, which increases
the urgency that system administrators apply a patch," the Center warned.
IIS 5.0 is installed and running by default on Microsoft Windows 2000 server
products.
CERT/CC said the unchecked buffer was detected in a Windows component of
the World Wide Web Distributed Authoring and Versioning (WebDAV) protocol,
which is supported by Windows 2000. An attacker could send a specially
formed HTTP request to a machine running IIS, causing the server to fail or
to execute code of the attacker's choice.
https://o1.qnsr.com/log/p.gif?;n=203;c=204660774;s=9478;x=7936;f=201812281339040;u=j;z=TIMESTAMP;a=20403972;e=iWebDAV uses IIS to pass requests to and from Windows 2000. Microsoft
explained that when IIS receives a WebDAV request, it typically processes
the request and then acts on it. However, if the request is formed in a
particular way, a buffer overrun can result because one of the Windows
components called by WebDAV does not correctly check parameters.
RELATED NEWS AND ANALYSIS
-
Top Machine Learning Solutions
FEATURE | By Samuel Greengard,
February 14, 2019
-
Google Machine Learning Engine: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
Alteryx: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
SAP Leonardo: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
RapidMiner: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
Microsoft Azure Machine Learning Studio: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
IBM Watson Studio: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
SAS Visual Machine Learning: Product Overview and Insight
FEATURE | By Samuel Greengard,
February 14, 2019
-
AWS SageMaker: Product Overview and Insight
ARTIFICIAL INTELLIGENCE | By Samuel Greengard,
February 14, 2019
-
Artificial Intelligence in Business: Using AI in Your Company
ARTIFICIAL INTELLIGENCE | By Daniel Dern,
February 08, 2019
-
How IBM’s Project Debater Could Fix Facebook
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
January 21, 2019
-
IBM Announces Most Powerful AI Effort Yet: The Birth of Smart HR
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
December 07, 2018
-
IBM Spectrum Discover: AI at Scale
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
October 26, 2018
-
The Top Cloud-Based AI Services
ARTIFICIAL INTELLIGENCE | By Andy Patrizio,
September 11, 2018
-
Artificial Intelligence Salaries: Paychecks Heading Skyward
ARTIFICIAL INTELLIGENCE | By Andy Patrizio,
August 28, 2018
-
Artificial Intelligence Use Cases
FEATURE | By Samuel Greengard,
August 13, 2018
-
25 Top AI Startups
FEATURE | By Andy Patrizio,
July 18, 2018
-
CIOs Leveraging AI and Machine Learning For ITSM Goals
ARTIFICIAL INTELLIGENCE | By Jeff Kaplan,
July 03, 2018
-
35 Artificial Intelligence Courses
ARTIFICIAL INTELLIGENCE | By Cynthia Harvey,
May 04, 2018
-
Top 15 Machine Learning Companies
ARTIFICIAL INTELLIGENCE | By Andy Patrizio,
April 19, 2018
Submit a Comment
Loading Comments...