Microsoft · Iis · CVE-2009-1536
Name of the Vulnerable Software and Affected Versions:
ASP.NET in Microsoft .NET Framework versions 2.0 SP1 and SP2 and 3.5 Gold and SP1
Description:
The issue is related to improper management of request scheduling in ASP.NET when used in integrated mode on IIS 7.0. This allows remote attackers to cause a denial of service via a series of crafted HTTP requests.
Recommendations:
For ASP.NET in Microsoft .NET Framework versions 2.0 SP1 and SP2, consider applying configuration changes to manage request scheduling properly until a patch is available.
For ASP.NET in Microsoft .NET Framework version 3.5 Gold and SP1, consider applying configuration changes to manage request scheduling properly until a patch is available.