4 ms·
The part that makes this really nasty is it doesn't just impact webservers. IIS is highly leveraged by other Microsoft technologies, everything from WSUS to SMT
by stephengillie 12y ago
The part that makes this really nasty is it doesn't just impact webservers. IIS is highly leveraged by other Microsoft technologies, everything from WSUS to SMTP to Exchange to Sharepoint are affected. In my environment, I estimate that 3/4 of my servers are vulnerable.
- deleted 12y ago[deleted]
- MichaelGG 12y agoIt's not IIS. It's HTTP.SYS. New configs have Powershel remote or WinRM. They use http.Sys and are vulnerable.
- MichaelGG 12y agoSeems I'm wrong. Kernel cache has to be enabled explicitly and Powershell/WinRM don't do that. Whew.
- stephengillie 12y agoWe all dodged a bullet there.
- MichaelGG 12y agoThey really should have made it clear that it's a mitigating factors and that most (some, many?) non-IIS uses wouldn't use kernel caching and thus be OK.