Denial of Service in Microsoft Windows Media Server for Windows 2000 and Windows NT

Reported May 28, 2003, by Microsoft.

VERSIONS AFFECTED

DESCRIPTION

A new vulnerability in Microsoft Windows Media Services (WMS) for Windows 2000 and Windows NT can result in a Denial of Service (DoS) condition. This vulnerability stems from a flaw in the way nsiislog.dll processes incoming requests. An attacker can exploit this vulnerability by sending specially formed communications to the server that cause IIS to stop responding to Internet requests.

VENDOR RESPONSE

Microsoft has released Security BulletinMS03-019, "Flaw in ISAPI Extension for Windows Media Services Could Cause Denial of Service (817772)," to address this vulnerability and recommends that affected users apply the appropriate patch mentioned in the bulletin.

·        CREDIT          

Discovered byBrett Moore.