[25756] in bugtraq
VNA - .HTR HEAP OVERFLOW
daemon@ATHENA.MIT.EDU (Mark Litchfield)
Thu Jun 13 14:14:13 2002
Message-ID: <004b01c21311$18fb7660$0f00000a@liberty>
From: "Mark Litchfield" <mark@ngssoftware.com>
To: <bugtraq@securityfocus.com>
Date: Thu, 13 Jun 2002 12:32:45 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Please note that http://www.ngssoftware.com/vna/ms-iishtr.txt is the same
issue as discovered by Riley Hassell of Eeye. By applying the patch found
at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS02-028.asp will ensure that you are protected if the .HTR ISAPI
filter is enabled.
Regards
Mark Litchfield
www.ngssoftware.com
Tel: +44 208 40 100 70