CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

Microsoft IIS 4.0/5.0 Escaped Characters Vulnerability (MS00-023)

2016年9月27日 1101点热度 0人点赞 0条评论

漏洞类别:Web server漏洞等级:

漏洞信息

Requesting a malformed URL containing numerous escaped characters will cause Microsoft IIS performance to dramatically decrease until the URL has been processed.

漏洞危害

Note: To avoid causing a denial of service on your server, we don't perform active tests for this vulnerability. Therefore, if you've already applied the appropriate patches, you can safely ignore this warning. (For information on patches, see the Solution field below.)

By sending multiple requests with a malformed URL (as described in the Description field), responsiveness of your Web server, and eventually other services on it, may decrease significantly.

解决方案

Patch:
Following are links for downloading patches to fix the vulnerabilities:

MS00-023: Internet Information Server 4.0

MS00-023: Internet Information Server 5.0

0day

标签: 暂无
最后更新:2016年10月22日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me