Severity: : Low
  CVE Kennungen: : CVE-2009-1536
  Advisory Date: 21 de lipca de 2015

  DESCRIPTION

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."

  INFORMATION EXPOSURE

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003671
  Trend Micro Deep Security DPI Rule Name: 1003671 - Remote Unauthenticated Denial Of Service In ASP.NET Vulnerability

  AFFECTED SOFTWARE AND VERSION:

  • microsoft windows_server 2008
  • microsoft windows_vista
  • microsoft windows_vista -