CVE-2017-7269Microsoft Windows Server Buffer Overflow Vulnerability

Description

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• 41992 exploitExploitThird Party AdvisoryVDB Entry
• 97127 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• https://medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 Exploit
• https://github.com/rapid7/metasploit-framework/pull/8162 Issue TrackingPatch
• https://github.com/danigargu/explodingcan Exploit
• 1038168 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• 41738 exploitExploitThird Party AdvisoryVDB Entry
• https://support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-window… Broken LinkPatchVendor Advisory
• https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html ExploitThird Party Advisory
• https://github.com/edwardz246003/IIS_exploit Broken LinkThird Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-7269 US Government Resource