Microsoft IIS Request Header Buffer Overflow (MS10-065; CVE-2010-2730) - ver 2

A code execution vulnerability exists in Microsoft Internet Information Services IIS...

Microsoft IIS FastCGI请求头远程溢出漏洞（MS10-065）

BUGTRAQ ID: 43138 CVE ID: CVE-2010-2730 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 对于启用了FastCGI功能的IIS服务器，远程攻击者可以通过提交特制的HTTP请求触发缓冲区溢出，导致执行任意代码。 Microsoft IIS 7.5 临时解决方法： 禁用FastCGI。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-065）以及相应补丁: MS10-065：Vulnerabiliti...

CVE-2010-2730

CVE-2010-2730 affects Microsoft Internet Information Services (IIS) 7.5 when FastCGI is enabled. It is a remote code execution vulnerability caused by a heap buffer overflow in the HTTP header processing path exposed when handling crafted request headers, allowing an unauthenticated remote attack...

MS10-065: Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Remote Code Execution (2267960)

The version of IIS installed on the remote host has the following vulnerabilities : - Sending a specially crafted request for an ASP page on a website hosted by IIS can result in a denial of service. CVE-2010-1899 - Sending a specially crafted HTTP request to an IIS server with FastCGI enabled ca...