Signature Detail
Short Name |
HTTP:IIS:ASPNET-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
ASP.NET Denial of Service |
Release Date |
2009/08/11 |
Update Number |
1479 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: ASP.NET Denial of Service
This signature detects attempts to exploit a known vulnerability against Microsoft ASP.NET server. A successful attack can result in a denial-of-service condition.
Extended Description
Microsoft ASP.NET is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application pool on the affected webserver to become unresponsive, denying service to legitimate users. NOTE: This issue only affects ASP.NET on webservers running IIS 7 in integrated mode.
Affected Products
- Microsoft .NET Framework 2.0
- Microsoft .NET Framework 2.0 SP1
- Microsoft .NET Framework 2.0 SP2
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 SP1
References
- BugTraq: 35985
- CVE: CVE-2009-1536