Alert - IIS 5.0 Vulnerabilities

re: Alert - IIS 5.0 Vulnerabilities

bernard — Sat, 03 Jul 2004 04:36:00 GMT

Latest Microsoft's response:
Microsoft has released a configuration change that addresses the recent malicious attack against Internet Explorer known as Download.Ject.

In addition, Microsoft has released a Knowledge Base article, 870669, that provides information that administrators can use to implement this change manually in their environment and to deploy the change across
their networks. This Knowledge Base article is available here:

http://support.microsoft.com/?id=870669

Customers are advised to review the information in the Knowledge Base article, test and deploy the change immediately in their environments, if applicable.

re: Alert - IIS 5.0 Vulnerabilities

bernard — Thu, 01 Jul 2004 15:59:00 GMT

Thanks.

re: Alert - IIS 5.0 Vulnerabilities

bernard — Thu, 01 Jul 2004 10:56:00 GMT

Further information

re: Alert - IIS 5.0 Vulnerabilities

bernard — Mon, 28 Jun 2004 19:49:00 GMT

More detail -
http://www.microsoft.com/presspass/press/2004/jun04/0625download-jectstatement.asp

re: Alert - IIS 5.0 Vulnerabilities

bernard — Sun, 27 Jun 2004 08:03:00 GMT

Latest KB article about the exploit -
Internet Information Services (IIS) 5.0 – Download.Ject Detection and Recovery Advisory
http://support.microsoft.com/?id=871277