Monday, August 31, 2009

Microsoft IIS 5/6 FTP 0Day released

A new 0-day exploit been released. It is targeting Win2K's Microsoft IIS 5/6 FTP service.

Your server is vulnerable if you are:
  • Running Microsoft IIS 5/6 FTP service on Windows 2000.
  • Allowing anonymous access with WRITE access.
References: