CVE-2017-7269

Description

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

References

https://www.exploit-db.com/exploits/41992/

https://www.exploit-db.com/exploits/41738/

https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server

https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812

https://github.com/rapid7/metasploit-framework/pull/8162

https://github.com/edwardz246003/IIS_exploit

https://github.com/danigargu/explodingcan

https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html

http://www.securitytracker.com/id/1038168

http://www.securityfocus.com/bid/97127

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3