Gawkwire: Web Hosting and Internet News Resource: IIS 6 attack could let hackers snoop on servers

IIS 6 attack could let hackers snoop on servers
================================================================================
David_WHM on 19 May, 2009 09:40:00
 
(WebHost Magazine) Security vendors are warning users of Microsoft's Internet
Information Services 6 Web-server software that a new online attack could put
their data at risk. The flaw was made public Thursday, when security researcher
Nikolaos Rangos posted details of the vulnerability to the Full Disclosure
security mailing list. By sending a specially crafted HTTP request to the server
he was able to view and upload files on the machine. The attack takes advantage
of a bug in the way that Microsoft's software processes Unicode tokens, he said.
... Go to source