oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:6508

Oval ID:	oval:org.mitre.oval:def:6508
Title:	IIS FTP Service DoS Vulnerability
Description:	Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authenticated users to cause a denial of service (daemon crash) via a list (ls) -R command containing a wildcard that references a subdirectory, followed by a .. (dot dot), aka "IIS FTP Service DoS Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-2521	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):	Microsoft Internet Information Server (IIS)
Definition Synopsis:
Windows 2000 - IIS 5.0 (FTP Service 5.0) Microsoft Windows 2000 is installed AND Microsoft IIS 5.0 is installed AND The version of ftpsvc2.dll is less than 5.0.2195.7336 OR Windows XP x86 - IIS 5.1 (FTP Service 5.1) Microsoft Windows XP (32-bit) is installed AND Microsoft IIS 5.1 is installed AND The version of ftpsvc2.dll is less than 6.0.2600.3624 OR Windows XP x86 - IIS 5.1 (FTP Service 5.1) Microsoft Windows XP (32-bit) is installed AND Microsoft IIS 5.1 is installed AND The version of ftpsvc2.dll is less than 6.0.2600.5875 OR Windows XP x64/Windows 2003 (x86/x64/ia64) - IIS 6.0 (FTP Service 6.0) Windows XP x64/Windows 2003 (x86/x64/ia64) Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft IIS 6.0 is installed AND The version of ftpsvc2.dll is less than 6.0.3790.4584 OR Windows Vista x86/x64 - IIS 7.0 (FTP Service 6.0) Windows Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft IIS 7.0 is installed AND the version of ftpsvc2.dll is greater than or equal 7.0.6000.16000 AND The version of ftpsvc2.dll is less than 7.0.6000.16923 OR Windows Vista x86/x64 - IIS 7.0 (FTP Service 6.0) Windows Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft IIS 7.0 is installed AND the version of ftpsvc2.dll is greater than or equal 7.0.6000.20000 AND The version of ftpsvc2.dll is less than 7.0.6000.21123 OR Windows Vista x86/x64, Windows Server 2008 x86/x64/ia64 - IIS 7.0 (FTP Service 6.0) Windows Vista x86/x64, Windows Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft IIS 7.0 is installed AND GDR or LDR Service branch The version of ftpsvc2.dll is less than 7.0.6001.18327 OR LDR the version of ftpsvc2.dll is greater than or equal 7.0.6001.22000 AND The version of ftpsvc2.dll is less than 7.0.6001.22516 OR Windows Vista x86/x64, Windows Server 2008 x86/x64/ia64 - IIS 7.0 (FTP Service 6.0) Windows Vista x86/x64, Windows Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft IIS 7.0 is installed AND GDR or LDR Service branch The version of ftpsvc2.dll is less than 7.0.6002.18107 OR LDR the version of ftpsvc2.dll is greater than or equal 7.0.6002.22000 AND The version of ftpsvc2.dll is less than 7.0.6002.22219

Definition Id: oval:org.mitre.oval:def:1870

Oval ID:	oval:org.mitre.oval:def:1870
Title:	Microsoft Windows Server 2003 (32-bit) is installed
Description:	A version of Microsoft Windows Server 2003 (32-bit) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003:::x86	Version:	8
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:15247

Oval ID:	oval:org.mitre.oval:def:15247
Title:	Microsoft Windows XP x64 is installed
Description:	A version of Microsoft Windows XP x64 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp::x64	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:731

Oval ID:	oval:org.mitre.oval:def:731
Title:	Microsoft IIS 5.0 is installed
Description:	The application Microsoft IIS 5.0 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:iis:5.0	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	Microsoft IIS 5.0
Definition Synopsis:
IIS major version equals 5 AND IIS Minor Version equals 0
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:396

Oval ID:	oval:org.mitre.oval:def:396
Title:	Microsoft Windows Server 2003 (ia64) Gold is installed
Description:	A version of Microsoft Windows Server 2003 (ia64) Gold is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003::-:itanium	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the ia64 architecture is installed AND NOT Win2K/XP/2003 is patched
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:105

Oval ID:	oval:org.mitre.oval:def:105
Title:	Microsoft Windows XP is installed
Description:	The operating system installed on the system is Microsoft Windows XP.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed

Definition Id: oval:org.mitre.oval:def:460

Oval ID:	oval:org.mitre.oval:def:460
Title:	Microsoft IIS 5.1 is installed
Description:	The application Microsoft IIS 5.1 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:iis:5.1	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	Microsoft IIS 5.1
Definition Synopsis:
IIS major version equals 5 AND IIS 5.1 Minor Version
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:1353

Oval ID:	oval:org.mitre.oval:def:1353
Title:	Microsoft Windows XP (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows XP (32-bit).
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp:::x86	Version:	4
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:5377

Oval ID:	oval:org.mitre.oval:def:5377
Title:	Microsoft IIS 7.0 is installed
Description:	The application Microsoft IIS 7.0 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:iis:7.0	Version:	3
Platform(s):	Microsoft Windows Vista Microsoft Windows Server 2008	Product(s):	Microsoft IIS 7.0
Definition Synopsis:
IIS Major Version equals 7 AND IIS Minor Version equals 0
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:227

Oval ID:	oval:org.mitre.oval:def:227
Title:	Microsoft IIS 6.0 is installed
Description:	The application Microsoft IIS 6.0 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:iis:6.0	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	Microsoft IIS 6.0
Definition Synopsis:
IIS Major Version equals 6 AND IIS Minor Version equals 0
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:730

Oval ID:	oval:org.mitre.oval:def:730
Title:	Microsoft Windows Server 2003 (x64) is installed
Description:	A version of Microsoft Windows Server 2003 (x64) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003:::x64	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:5667

Oval ID:	oval:org.mitre.oval:def:5667
Title:	Microsoft Windows Server 2008 (ia-64) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::itanium	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the ia64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:5356

Oval ID:	oval:org.mitre.oval:def:5356
Title:	Microsoft Windows Server 2008 (64-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x64	Version:	8
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:4870

Oval ID:	oval:org.mitre.oval:def:4870
Title:	Microsoft Windows Server 2008 (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x86	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:2041

Oval ID:	oval:org.mitre.oval:def:2041
Title:	Microsoft Windows Vista x64 Edition is installed
Description:	The operating system installed on the system is Microsoft Windows Vista x64 Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x64	Version:	6
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:1282

Oval ID:	oval:org.mitre.oval:def:1282
Title:	Microsoft Windows Vista (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Vista (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x86	Version:	4
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508 oval:org.mitre.oval:def:6508

Definition Id: oval:org.mitre.oval:def:85

Oval ID:	oval:org.mitre.oval:def:85
Title:	Microsoft Windows 2000 is installed
Description:	The operating system installed on the system is Microsoft Windows 2000.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_2000	Version:	5
Platform(s):	Microsoft Windows 2000	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows 2000 is installed
Referenced By:
oval:org.mitre.oval:def:6508

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0582s

Facebook rss twitter linkedin mail