Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.801482 |
Kategorie: | Windows : Microsoft Bulletins |
Titel: | Microsoft Windows ASP.NET Denial of Service Vulnerability(970957) |
Zusammenfassung: | This host is missing a critical security update according to; Microsoft Bulletin MS09-036. |
Beschreibung: | Summary: This host is missing a critical security update according to Microsoft Bulletin MS09-036. Vulnerability Insight: The flaws is caused by caused by an error in ASP.NET when managing request scheduling, which could allow attackers to create specially crafted anonymous HTTP requests and cause the web server with ASP.NET in integrated mode to become non-responsive. Vulnerability Impact: Successful exploitation will allow remote attackers to cause the application pool on the affected web server to become unresponsive, denying service to legitimate users. Affected Software/OS: - Microsoft .NET Framework 3.5/SP 1 - Microsoft .NET Framework 2.0 SP 1/SP 2 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P |
Querverweis: |
BugTraq ID: 35985 Common Vulnerability Exposure (CVE) ID: CVE-2009-1536 http://www.securityfocus.com/bid/35985 Cert/CC Advisory: TA09-223A http://www.us-cert.gov/cas/techalerts/TA09-223A.html http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx Microsoft Security Bulletin: MS09-036 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036 http://osvdb.org/56905 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393 http://www.securitytracker.com/id?1022715 http://secunia.com/advisories/36127 http://www.vupen.com/english/advisories/2009/2231 |
Copyright | Copyright (c) 2010 Greenbone Networks GmbH |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |