- Quick specs
- Price: Free
- Operating system: Windows NT
- Date added: January 09, 2001
- Total Downloads: 4,393
- Downloads last week: 2
- See full specifications
- Average user rating: stars out of 3 votes
See all user reviews
Publisher's description
From Microsoft :This patch eliminates a security vulnerability in a component that ships as part of Microsoft Internet Information Server. The vulnerability could potentially allow an attacker to prevent an affected web server from providing useful service.
The FrontPage Server Extensions (FPSE) ship with and are installed by default as part of IIS 4.0 and 5.0. The most familiar FPSE functions allow Web site and content management; however, FPSE also provides browse-time support functions. Among the functions included in the latter category are ones that help process Web forms that have been submitted by a user. A vulnerability exists in one of these functions. If a malicious user levied a specially-malformed form submission to an affected server, it would cause the IIS service to fail. The vulnerability does not provide the opportunity to misuse any of the FPSE administrative or content management functions.
To resume normal operation on an IIS 4.0 server, the operator would need to restart the service. In contrast, if an IIS 5.0 server were attacked via this vulnerability, the IIS service would, by default, automatically restart almost immediately. Although any Web sessions that were in progress at the time of the attack would be lost, the server would be able to accept new connections as soon as the service was restarted. FPSE is installed by default as part of IIS 4.0 and 5.0, but, in keeping with best practices, Microsoft recommends that they be disabled if not needed.
CNET Editor's Note: Note: This IIS 4.0 patch can be applied atop systems running Windows NT 4.0 Service Pack 6a or 5. It will be included in Windows NT 4.0 Service Pack 7.
More popular Corporate Security Software downloads
- 2,278 downloads 1. Folder Guard
- 1,060 downloads 2. L0phtCrack
- 735 downloads 3. McAfee Total Protection for Small Business
- 661 downloads 4. Spyware Doctor Enterprise Free Edition
- 447 downloads 5. Wireshark
- See all Corporate Security Software downloads
User reviews
- Average user rating: 0 stars Not yet available
- My rating: 0 stars Write review
-
Showing 1 of 1 user reviewSee 1 user review
This software version | All versions -
Version: Microsoft "Malformed Web Form Submission" Vulnerability Patch (IIS 4.0) MS00-100
- See 1 user review Write review
Submit your review
- See more CNET content tagged:
- Microsoft IIS 4.0,
- Microsoft IIS Server,
- content management,
- server,
- vulnerability
%20-%20Free%20software%20downloads%20and%20software%20reviews%20-%20CNET%20Download.com&srcUrl=http://download.cnet.com/Microsoft-Malformed-Web-Form-Submission-Vulnerability-Patch-IIS-4-0/3000-2653_4-10053468.html){kind=small}