4 ms·
It's not IIS. It's HTTP.SYS. New configs have Powershel remote or WinRM. They use http.Sys and are vulnerable.
by MichaelGG 12y ago
It's not IIS. It's HTTP.SYS. New configs have Powershel remote or WinRM. They use http.Sys and are vulnerable.
- MichaelGG 12y agoSeems I'm wrong. Kernel cache has to be enabled explicitly and Powershell/WinRM don't do that. Whew.
- stephengillie 12y agoWe all dodged a bullet there.
- MichaelGG 12y agoThey really should have made it clear that it's a mitigating factors and that most (some, many?) non-IIS uses wouldn't use kernel caching and thus be OK.