ID de Prueba:	1.3.6.1.4.1.25623.1.0.901151
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Internet Information Services Remote Code Execution Vulnerabilities (2267960)
Resumen:	This host is missing a critical security update according to; Microsoft Bulletin MS10-065.
Descripción:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-065. Vulnerability Insight: - a stack overflow error in the ASP script processing code when processing specially crafted URL requests sent to active server pages, which could be exploited to cause a denial of service. - a buffer overflow error in the FastCGI module when processing malformed HTTP headers, which could be exploited by remote attackers to take complete control of the affected system via a specially crafted request. - an error when processing specially crafted URLs, which could be exploited to bypass authentication. Vulnerability Impact: Successful exploitation could allow remote attackers to bypass restrictions, create a denial of service condition or compromise a vulnerable web server. Affected Software/OS: - Microsoft Windows 7 - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior - Microsoft Internet Information Services (IIS) version 5.1 - Microsoft Internet Information Services (IIS) version 6.0 - Microsoft Internet Information Services (IIS) version 7.0 - Microsoft Internet Information Services (IIS) version 7.5 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1899 Microsoft Security Bulletin: MS10-065 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-065 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7127 Common Vulnerability Exposure (CVE) ID: CVE-2010-2730 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6933 Common Vulnerability Exposure (CVE) ID: CVE-2010-2731 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6942
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.