exploits , vulnerabilities , articles , Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability

Title	Microsoft IIS FTPd Globbing Functionality Remote Denial of Service Vulnerability
Published	2009-09-03-12:00AM
Updated	2009-09-04-03:21PM
Class	Design Error
CVE
Remote	Yes
Local	No
Credit	Kingcope
Vulnerable	Microsoft IIS 6.0 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Web Edition Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Server
Not Vulnerable
Code	The following example command is available:ls "-R p*/../"
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-01 AWStats Multiple Unspecified Security Vulnerabilities
2009-12-01 TYPO3 simple Glossar Extension Unspecified Cross-Site Scripting and SQL-Injection Vulnerabilities
2009-12-01 TYPO3 Automatic Base Tags for RealUrl Extension Cache Spoofing Vulnerability
2009-12-01 TYPO3 TW Productfinder Extension Unspecified SQL Injection Vulnerability
2009-12-01 TYPO3 Trips Extension Unspecified SQL Injection Vulnerability
2009-12-01 TYPO3 [AN] Search it! Component Cross Site Scripting Vulnerability
2009-12-01 BlackBerry Attachment Service PDF Distiller Multiple Remote Code Execution Vulnerabilities
2009-12-01 CUPS File Descriptors Handling Remote Denial Of Service Vulnerability
2009-12-01 Multiple Vendor Clientless SSL VPN Products Same Origin Policy Bypass Vulnerability
2009-12-01 Asterisk RTP Comfort Noise Processing Remote Denial of Service Vulnerability