Microsoft releases IIS patch and NIPC companion article

by Elisabeth Nelson | Mar 16, 2001 8:00:00 AM

Tags: Elisabeth Nelson

Takeaway: Microsoft has released an IIS 5.0 patch that replaces a previous workaround for a WebDAV problem. Exterminator also found an article complementing last week's NIPC report. All's well on the Novell front, but catch up on the latest viruses.

Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-016)
Regarding: IIS 5.0
Date Posted: March 13, 2001
Patch URL:Click here to download the IIS patch.
Information URL:Click here for more information.

A problem with the way WebDAV handles one type of malformed request could allow an attacker to consume all CPU availability on the server. WebDAV is an extension to the HTTP protocol that allows remote authoring and management of Web content. While Microsoft has provided a workaround, they recommend downloading the patch instead.

Microsoft has also published a companion article to the FBI's National Infrastructure Protection Center (NIPC) advisory detailing recent attacks against e-commerce and e-banking systems. The article details the vulnerabilities used in these attacks and the bulletins that provide patches for them.

Novell issues
Novell Administrators can relax this week. Exterminator found nothing new to report.

Virus updates from Trend Micro
Virus/Worm: TROJ_SUB7.22.D
Posted: March 12, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_CAINABEL151
Posted: March 12, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: PE_MAGISTR.A
Posted: March 13, 2001
Risk: Low
Information URL:Click here for more information on this virus.

---

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

---

 

Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-016)
Regarding: IIS 5.0
Date Posted: March 13, 2001
Patch URL:Click here to download the IIS patch.
Information URL:Click here for more information.

A problem with the way WebDAV handles one type of malformed request could allow an attacker to consume all CPU availability on the server. WebDAV is an extension to the HTTP protocol that allows remote authoring and management of Web content. While Microsoft has provided a workaround, they recommend downloading the patch instead.

Microsoft has also published a companion article to the FBI's National Infrastructure Protection Center (NIPC) advisory detailing recent attacks against e-commerce and e-banking systems. The article details the vulnerabilities used in these attacks and the bulletins that provide patches for them.

Novell issues
Novell Administrators can relax this week. Exterminator found nothing new to report.

Virus updates from Trend Micro
Virus/Worm: TROJ_SUB7.22.D
Posted: March 12, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_CAINABEL151
Posted: March 12, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: PE_MAGISTR.A
Posted: March 13, 2001
Risk: Low
Information URL:Click here for more information on this virus.

---

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

---