Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Encoding Post Vulnerability; A New Registry Security Tool
Learn about the new encoding post vulnerability in IIS 4.0. Also, read about the new Microsoft security tool designed to tighten permissions on Windows NT 4.0 Registries.
Allen Jones
March 27, 2000
1 Min Read
Chunked Encoding Post Vulnerability in IIS 4.0
Microsoft issued Security Bulletin MS00-018, which outlines the new Chunked Encoding Post vulnerability in IIS 4.0. This vulnerability lets a malicious user perform a Denial of Service (DoS) attack against a Web server. The attack exploits buffered memory for PUT and power-on self test (POST) operations by absorbing memory allocated to the Web server. The attack can eventually prevent the Web server from performing normally. For more information about this vulnerability and a patch, go to http://www.microsoft.com/technet/security/bulletin/ms00-018.asp.
Microsoft Releases Registry Security Tool
Earlier this month, Microsoft released a Registry tool designed to tighten permissions on Windows NT 4.0 Registries in order to eliminate potential vulnerabilities. For more information, see Microsoft Security Bulletin (MS00-008).
About the Author(s)
You May Also Like
