漏洞类别：Web server漏洞等级： 
漏洞信息
WebDAV is an extension of the HTTP protocol and is installed by default on Microsoft IIS Version 5.0. WebDav enables remote users to manage and collaboratively edit files on remote Web servers.
Microsoft IIS is subject to a denial of service attack. The duration of which is dependent on how long the unauthorized remote user continuously sends the request. Once the malformed requests come to an end, the server will regain normal functionality.
If you've already applied the patch mentioned in the Solution field below, then you can safely disregard this vulnerability.
漏洞危害
Because WebDAV contains a flaw in the handling of certain malformed requests, an unauthorized remote user submitting multiple malformed WebDAV 'PROPFIND' requests could cause the server to stop responding. If this occurs, then the server would not be able to accept any new HTTP sessions.
解决方案
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论