Microsoft Web Server Vulnerable to ISAPI Buffer Overflow

IIS Exposed to Data Flood Damage As the mighty Mississippi recedes from the sandbag levees in Iowa, a serious breach in the dam of that other force of nature, Microsoft, comes to the fore. eEye Digital Security announced on May 1 its discovery of an unchecked buffer in the Internet Printing Protocol (IPP) of IIS version 5.0 for Windows 2000. The buffer overflow in this case exposes the Extended Instruction Pointer (EIP) CPU register, allowing an attacker to compromise the security of Microsoft's premier web server platform. (more...)