Microsoft Internet Information Server 5.0 Patch: Specialized Header

This update resolves the "Specialized Header" vulnerability in Internet Information Services (IIS) 5.0, which ships with Windows 2000. Download now to prevent a malicious user from exploiting this vulnerability and causing your Web server to send the source code of .asp or .htr files to a visiting browser. Security recommendations advise against ever including sensitive information in .asp or .htr files. IIS supports advanced file types such as .asp and .htr files, which are executed by a scripting engine on a server and are not sent to your browser, as .htm files are. IIS determines what scripting engine to use by checking file extensions. A malicious user could go to a Web site and add particular characters to the end of the Web site's URL, requesting further files within the site. IIS locates the correct advanced file, but does not recognize it as a file that needs processing by a scripting engine. Consequently, IIS sends the file to a browser as it does .htm files, revealing the file source code.
PriceUSD0
LicenseFree
File Size323.67 kB
VersionUpdate
Operating System Windows 2000 Windows
System Requirements<li>Windows NT 4 SP 6</li><li>Windows 2003 SP 1</li><li>Windows XP AMD 64-bit</li><li>Windows XP 64-bit SP 1</li><li>Windows NT 4 SP 2</li><li>Windows 2000 SP 1</li><li>Windows 2003 64-bit</li><li>Windows 2003 AMD 64-bit</li><li>Windows XP 64-bit SP 2</li><li>Windows NT 4 SP 3</li><li>Windows 2000 SP 2</li><li>Windows Server 2003 x64 R2</li><li>Windows 2000</li><li>Windows 2003 64-bit SP 1</li><li>Windows Vista AMD 64-bit</li><li>Windows XP Itanium 64-bit</li><li>Windows NT 4 SP 4</li><li>Windows 2000 SP 3</li><li>Windows NT 4</li><li>Windows XP 32-bit</li><li>Windows XP SP 1</li><li>Windows Server 2003 x86 R2</li><li>Windows ME</li><li>Windows 2003 Itanium 64-bit</li><li>Windows NT 4 SP 5</li><li>Windows 2000 SP 4</li><li>Windows Vista 32-bit</li><li>Windows XP 64-bit</li><li>Windows NT 4 SP 1</li><li>Windows Server 2008 x64</li><li>Windows NT 3</li><li>Windows Server 2008 x86</li><li>Windows XP</li><li>Windows Server 2008</li><li>Windows 2003</li><li>Windows Vista Itanium 64-bit</li><li>Windows XP Itanium 64-bit SP 1</li><li>Windows 2003 32-bit</li><li>Windows XP Itanium 64-bit SP 2</li><li>Windows XP SP 2</li><li>Windows 95</li><li>Windows 98</li><li>Windows Vista</li><li>Windows NT</li><li>Windows 2003 Itanium 64-bit SP 1</li><li>Windows XP Pro</li>