Gravité: : Faible
  Identifiant(s) CVE: : CVE-2009-1536
  Date du conseil: 21 juillet 2015

  Description

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1003671
  Trend Micro Deep Security DPI Rule Name: 1003671 - Remote Unauthenticated Denial Of Service In ASP.NET Vulnerability

  Affected software and version:

  • microsoft windows_server 2008
  • microsoft windows_vista
  • microsoft windows_vista -