Security Bypass: Remote attackers can bypass security checking of vulnerable systems.
Description
This indicates an attack attempt to exploit an authentication-bypass vulnerability in Microsoft windows IIS server.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious Web DAV request. A remote attacker may exploit this to bypass the authentication via a crafted HTTP request.
Affected Products
Microsoft Internet Information Services 5.0 Microsoft Internet Information Services 5.1 Microsoft Internet Information Services 6.0
Recommended Actions
Refer to Microsoft Security Advisory 971492 for the suggested workaround: http://www.microsoft.com/technet/security/advisory/971492.mspx