IIS virus triggers Red alert

IIS virus triggers Red alert. VNU Jul 18 2001 5:16PM ET

A worm bearing strong similarities to the sadmind virus, which hit over 9000 IIS websites back in May, has been doing the rounds, exploiting a vulnerability which is over a month old.

The worm exploits a known buffer overflow vulnerability – an ISAPI extension in the Index Server of Windows 2000 and XP beta – for which Microsoft released a patch in June that it believed had fixed the problem.

[Computer security news]

Leave a Reply