This update resolves two security vulnerabilities in Internet Information Services (IIS) 5.0, the "Absent Directory Browser Argument" vulnerability and the "File Fragment Reading via .HTR" vulnerability. Install this update to prevent a malicious user from exploiting these vulnerabilities to slow performance on an affected Web server or, under very specific conditions, obtain the source code of certain types of files on a Web server. An .htr file is a script that Windows NTA users can use to change passwords, and that administrators can use to perform a variety of password administration functions. Neither of these vulnerabilities allow data to be changed, added, or deleted on the server, nor do they allow administrative control over an affected computer.
Requirements:
- Windows NT 4 SP 6
- Windows 2003 SP 1
- Windows XP AMD 64-bit
- Windows XP 64-bit SP 1
- Windows NT 4 SP 2
- Windows 2000 SP 1
- Windows 2003 64-bit
- Windows 2003 AMD 64-bit
- Windows XP 64-bit SP 2
- Windows NT 4 SP 3
- Windows 2000 SP 2
- Windows Server 2003 x64 R2
- Windows 2000
- Windows 2003 64-bit SP 1
- Windows Vista AMD 64-bit
- Windows XP Itanium 64-bit
- Windows NT 4 SP 4
- Windows 2000 SP 3
- Windows NT 4
- Windows XP 32-bit
- Windows XP SP 1
- Windows Server 2003 x86 R2
- Windows ME
- Windows 2003 Itanium 64-bit
- Windows NT 4 SP 5
- Windows 2000 SP 4
- Windows Vista 32-bit
- Windows XP 64-bit
- Windows NT 4 SP 1
- Windows Server 2008 x64
- Windows NT 3
- Windows Server 2008 x86
- Windows XP
- Windows Server 2008
- Windows 2003
- Windows Vista Itanium 64-bit
- Windows XP Itanium 64-bit SP 1
- Windows 2003 32-bit
- Windows XP Itanium 64-bit SP 2
- Windows XP SP 2
- Windows 95
- Windows 98
- Windows Vista
- Windows NT
- Windows 2003 Itanium 64-bit SP 1
- Windows XP Pro
Comments not found