Microsoft IIS 5/6 FTP 0Day released

A new 0-day exploit been released. It is targeting Win2K's Microsoft IIS 5/6 FTP service.

Your server is vulnerable if you are:

• Running Microsoft IIS 5/6 FTP service on Windows 2000.
• Allowing anonymous access with WRITE access.

References:

• SANS: Microsoft IIS 5/6 FTP 0Day released.
• Exploit at Milw0rm.