Home page logo

bugtraq logo Bugtraq mailing list archives

ISS Server Sensor Denial of Service
From: <research () enteredge com>
Date: 5 Sep 2003 16:38:04 -0000

EnterEdge has discovered a Denial of Service condition in ISS RealSecure 
Server Sensor 7.0. The condition is present when running ISS's RealSecure 
Server Sensor 7.0 on a Microsoft IIS server with SSL.  By passing invalid 
unicode characters via ssl, the server sensor will shut down the IIS 
service.  This was tested with IIS 5.0 using ISS server sensor 7.0 xpu 
20.16 and 20.18.  ISS was notified and has since released xpu 20.19 which 
resolves this DoS vulnerability.  

CVE: CAN-2003-0702

  By Date           By Thread  

Current thread:
  • ISS Server Sensor Denial of Service research (Sep 05)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]