IIS 5 Security Alert

 
Apr 30, 2001
Moonerent@yahoo.co reminded the readers of the CF-Talk list about the following security issues:

Microsoft races to plug Web security hole
Microsoft Alert

Microsoft Security Bulletin MS01-023: Unchecked Buffer in ISAPI Extension Could Enable Compromise of IIS 5.0 Server
Microsoft Security Bulletin

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access):
Microsoft Alert

"As I undertand it you have to remove .printer. But I know you all did this when you removed .htr. ColdFusion's docs also suggest [that] all but the known and used extensions should be removed."


Privacy | FAQ | Site Map | About | Guidelines | Contact | Advertising | What is ColdFusion?
House of Fusion | ColdFusion Jobs | Blog of Fusion | AHP Hosting