OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: w1re p4ir (w1rep4irDISINFO.NET)
Date: Wed Jan 17 2001 - 15:00:20 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    IIS 2.0 Is vulnerable to the attack. I checked it running on a NT 4 server. Although i was having problems getting the tftp to connect to my server. Gave me weird reconnection issues.

    On Wed, 17 Jan 2001 16:22:14 +0100 Peter Osterberg <Peter_OsterbergHOME.SE> wrote:
    >Err,
    >
    >I've made some further digging today and found that it was a IIS 4.0 server
    >although the banners reported IIS 2.0.
    >
    >Sincerely
    >
    >Peter Osterberg
    >Dagaz AB
    >
    >At 21:48 2001-01-16, you wrote:
    >>Hi,
    >>
    >>during some activity today I found that IIS 2.0 also seems to be vulnerable
    >>to the unicode bug.
    >>I haven't been able to confirm that IIS 2.0 is installed on the remote
    >>site, but that is at least what the banners report.
    >>
    >>As I've followed the unicode thread I haven't seen that anyone has made
    >>this observation before.
    >>
    >>Sincerely,
    >>
    >>Peter Osterberg
    >>Dagaz AB
    >>
    >>----------------------------------------------------------
    >>Peter.Osterbergdagaz.se
    >>
    >>www.dagaz.se
    >>Slagthuset, Carlsgatan 12A, 10tr
    >>211 20 Malmoe
    >

    _____________________________________________________________
    Email your boss can't read - sign up for free disinfo.net email
    at http://www.disinfo.com, your gateway to the underground