HTTP: Microsoft IIS Server Crafted ASP Page Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft IIS Server Crafted ASP Page. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Microsoft Internet Information Server (IIS) is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. To exploit this issue, attackers must be able to place and execute malicious ASP pages on computers running the affected ASP server software. This may be an issue in shared-hosting environments. This issue allows remote attackers to execute arbitrary machine code in the context of the affected webserver software.

Affected Products

Microsoft windows_xp_media_center_edition

References

BugTraq: 18858

CVE: CVE-2006-0026

URL: http://security-assessment.com/advisories/asp.dll_include_file_buffer_overflow.pdf

Short Name

HTTP:IIS:ASP-PAGE-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft IIS Server Crafted ASP Page Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?