Microsoft IIS 4.0 Buffer Overflow Vulnerability Advisory (CAN-2004-0205)

Key Information Vulnerability Overview Vulnerability Type: Buffer Overrun Impact Scope: Remote Code Execution Severity: Important Affected Products: Microsoft Windows NT 4.0 with IIS 4.0 Vulnerability Identifier: CAN-2004-0205 Release and Update Information Release Date: July 13, 2004 Update Date: August 6, 2004 Affected Software and Components Affected - Windows NT 4.0 Workstation Service Pack 6a - Windows NT 4.0 Server Service Pack 6a - IIS 4.0 Not Affected - Windows 2000/XP/2003 series - IIS versions 5.0/5.1/6.0 Security Update Information Download Links - Windows NT 4.0 Workstation SP6a: Download Security Update - Windows NT 4.0 Server SP6a: Download Security Update Frequently Asked Questions (FAQ) Do I need to install the update? You can check using MBSA and SMS tools. Are the affected products still in support lifecycle? Yes, although some versions of Windows NT 4.0 have reached end-of-support, Microsoft has extended support. What can an attacker do? A successful exploit could allow an attacker to gain full control over the affected system. Are there any mitigations? Under certain conditions, such as having specific IIS components installed or appropriate security configurations, the risk can be reduced. Are there any workarounds? Yes, disabling permanent redirects, using URLScan, or reducing MaxClientRequestBufferSize can help prevent attacks. What is the scope of this vulnerability? This is a buffer overflow vulnerability that allows remote code execution. Additional Information Security Resources Provides links to Microsoft Security Update site, security tools, and product documentation. Obtaining Other Security Updates Explains how to get security updates from Microsoft Download Center and Windows Update site. Support Information** Offers technical support contact information for different regions and products.

Goal Reached Thanks to every supporter — we hit 100%!

Microsoft IIS 4.0 Buffer Overflow Vulnerability Advisory (CAN-2004-0205)