Windows IIS ping of death being sent out on the Internet || kuro5hin.org


	create account \| help/FAQ \| contact \| links \| search \| IRC \| site news

Everything

We need your support: buy an ad | premium membership

Windows IIS ping of death being sent out on the Internet

By Cable4096 in Cable4096's Diary
Thu Apr 16, 2015 at 10:42:17 PM EST
Tags: technology, software, Windows, hacking, ping of death, IIS (all tags)

http://www.theregister.co.uk/2015/04/16/http_sys_exploit_wild_ms15_034/

Make sure you patch your security updates on your Windows box or someone can send an HTTP request that can crash your kernel.

Windows IIS isn't safe and can be crashed easily unless it is patched. The patch came out last Tuesday.

Hackers have reverse engineered the patch to figure out how the exploit works.
They can check to see if a Windows system is vulnerable, and they can also send the HTTP request that crashes the kernel.
If you use Windows 7 or above you are at risk of this security flaw. Windows 2012 Server and above as well.
I imagine this is embarrassing for Microsoft and people who run web hosts with Windows.

Sponsors

Managed Hosting
VoxCAST Content Delivery
Raw Infrastructure

Windows IIS ping of death being sent out on the Internet | 1 comment (1 topical, editorial, 0 hidden)

Windows IIS ping of death being sent out on the Internet | 1 comment (1 topical, 0 editorial, 0 hidden)

All trademarks and copyrights on this page are owned by their respective companies. The Rest © 2000 - Present Kuro5hin.org Inc.
See our legalese page for copyright policies. Please also read our Privacy Policy.
Kuro5hin.org is powered by Free Software, including Apache, Perl, and Linux, The Scoop Engine that runs this site is freely available, under the terms of the GPL.
Need some help? Email help@kuro5hin.org.
My heart's the long stairs.