On Thu, 13 Oct 2005, Dariusz Swierzewski wrote:
Good Afternoon,
We are doing a quick vulnerability check on our offsite web server, running
Windows 2000 Server and IIS. Just recently we came up with the following
vulnerability and cannot figure out how to go about fixing this - any help
would be greatly appreciated.
Did you verify that this is not a false positive? If it is not then you
probably need to contact the vendor.
--
- Josh
VulnerabilityLiebDevMgmt_C (3027/tcp)
It was possible to kill the service by sending a single long
text line.
A cracker may be able to use this flaw to crash your software
or even execute arbitrary code on your system.
Risk factor : High
Nessus ID : 11175 VulnerabilityLiebDevMgmt_DM (3028/tcp)
It was possible to kill the service by sending a single long
text line.
A cracker may be able to use this flaw to crash your software
or even execute arbitrary code on your system.
Risk factor : High
Nessus ID : 11175 Regards
Dariusz Swierzewski
Sr. Systems Engineer
[EMAIL PROTECTED]
Home Properties of NY
850 Clinton Square
Rochester, NY 14604
Tel: 585-262-9369
Fax: 585-340-5948
www.homeproperties.com
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus