HTTP: Microsoft Internet Information Services ASP Handling Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft IIS. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Internet Information Services (IIS) is prone to a remote code-execution vulnerability that can be exploited through malicious input to vulnerable ASP pages. A successful exploit of this vulnerability could let remote attackers execute arbitrary code in the context of the Worker Process Identity, which by default has Network Service privileges.

References

BugTraq: 27676

CVE: CVE-2008-0075

Short Name

HTTP:IIS:ASP-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Information Services ASP Handling Code Execution

Extended Description

References

Found a potential security threat?