thedark Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
Posted: Sat Jul 30, 2005 3:21 pm Post subject: Malformed WebDAV Request Can Cause IIS to Exhaust CPU Resour |
|
|
WebDAV is an extension to the HTTP protocol that allows remote authoring and management of web content. In the Windows 2000 implementation of the protocol, IIS 5.0 performs initial processing of all WebDAV requests, then forwards the appropriate commands to the WebDAV process. However, a flaw exists in the way WebDAV handles a particular type of malformed request. If a stream of such requests were directed at an affected server, it would consume all CPU availability on the server.
Patch: http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28564 |
|