IIS 6 attack could let hackers snoop on servers

The vulnerability is being used in online attacks, the U.S. Computer Emergency Response Team said

(WebHost Magazine) Security vendors are warning users of Microsoft's Internet Information Services 6 Web-server software that a new online attack could put their data at risk. The flaw was made public Thursday, when security researcher Nikolaos Rangos posted details of the vulnerability to the Full Disclosure security mailing list. By sending a specially crafted HTTP request to the server he was able to view and upload files on the machine. The attack takes advantage of a bug in the way that Microsoft's software processes Unicode tokens, he said. ... Go to source

Add to: del.icio.us Digg Technorati