IIS5 Malformed URL Service Failure Vulnerability Patch MS01-014 (3/1/01)

Quick specs
Price: Free
Operating system: Windows 2000
Date added: April 03, 2001
Total Downloads: 7,107
Downloads last week: 2
See full specifications

Add to my list Add to my Watch List

Download Now (311.62K)

Tested spyware free

Average user rating: Be the first to rate this product!

Publisher's description

From Microsoft :

IIS 5.0 contains a flaw affecting the way that an URL is handled if it has a specific construction and its length is within a very narrow range of values. If such an URL were repeatedly sent to an affected system, a confluence of events could cause a memory allocation error that would result in the failure of the IIS service.

Exchange 2000 is affected by the same vulnerability. To support Web-based mail clients, it introduces the ability to address items on the store via URLs. This is done in part by using IIS 5.0, and in part via code that is specific to Exchange 2000. Both pieces of code contain the flaw, but the effect of exploiting the vulnerability via either would be the same--it could be used to cause the IIS service to fail, but could not be used to attack the Exchange service itself. That is, successfully attacking an Exchange server via this vulnerability would disrupt Web-based mail clients' use of the server, but not that of MAPI-based mail clients like Outlook.

Because the flaw occurs in two different code modules, one of which installs as part of IIS 5.0 and both of which install as part of Exchange 2000, it is important for Exchange 2000 administrators to install both this IIS patch, as well as the Exchange patch.

Registry Defense

Scan, edit, clean, and fix your system registry.

Download Now

More popular Corporate Security Software downloads

2,278 downloads 1. Folder Guard
1,060 downloads 2. L0phtCrack
735 downloads 3. McAfee Total Protection for Small Business
661 downloads 4. Spyware Doctor Enterprise Free Edition
447 downloads 5. Wireshark
See all Corporate Security Software downloads

Adobe Acrobat Professional

Compile different file types into one for easier sharing

Download Now

User reviews

Write your own review Be the first one to review IIS5 Malformed URL Service Failure Vulnerability Patch MS01-014 (3/1/01) and share your experience with the CNET community!
Previous versions: See all user reviews

Submit your review

IIS5 Malformed URL Service Failure Vulnerability Patch MS01-014 (3/1/01)

ORLog in with your Facebook account

1. Rate this product:: (Mouse over the stars to rate this product and click to set your rating.)
2. One-line summary:(Summarize your review in one line. 10 characters minimum; required.): 0 of 55 characters
3. Pros:(Tell us what you like about this product. 10 characters minimum; required.): 0 of 250 characters
4. Cons:(Tell us what you don't like about this product. 10 characters minimum; required.): 0 of 250 characters
Bottom-line summary:(Explain to us in detail why you like or dislike the product, focusing your comments on the product's features and functionality, and your experience using the product. This field is optional.): 0 of 5000 characters; Submit