IIS5 File-Fragment Reading via Malformed HTR Request Vulnerability Patch (MS01-004)

• Quick specs
• Price: Free
• Operating system: Windows 2000
• Date added: March 12, 2001
• Total Downloads: 11,226
• Downloads last week: 1
• See full specifications

Add to my list Add to my Watch List

Download Now (135.24K)

Tested spyware free

Publisher's description

This vulnerability involves a new variant of the 'File Fragment Reading via .HTR' vulnerability, previous variants of which were discussed in Microsoft Security Bulletins MS00-031 and MS00-044. Like the original variants, this one could enable an attacker to request a file in a way that would cause it to be processed by the HTR ISAPI extension. The result of doing this is that fragments of server-side files, such as ASP files, could potentially be sent to the attacker.

Customers who have previously disabled the HTR functionality would not be affected by this vulnerability. Microsoft recommends that all customers who haven't already disabled HTR do so, unless there is a business-critical reason for keeping it. For the latter group of customers, this patch will eliminate this vulnerability.

Real Player SP

Watch your favorite videos on your favorite devices.

Download Now

More popular Corporate Security Software downloads

1. 2,278 downloads 1. Folder Guard
2. 1,060 downloads 2. L0phtCrack
3. 735 downloads 3. McAfee Total Protection for Small Business
4. 661 downloads 4. Spyware Doctor Enterprise Free Edition
5. 447 downloads 5. Wireshark
6. See all Corporate Security Software downloads