APP: Microsoft IIS Phone Book Service Overflow
This signature detects attempts to exploit a known vulnerability in the Microsoft Internet Information Services (IIS) Phone Book Service. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.
Extended Description
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
Affected Products
Microsoft windows_2000
References
CVE: CVE-2000-1089
Short Name
APP:MISC:IIS-PHONEBOOK
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Book CVE-2000-1089 IIS Microsoft Overflow Phone Service
Release Date
10/25/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
Port
TCP/7210
False Positive
Unknown
Vendors
Microsoft
CVSS Score
10.0