Oct 15, 2009
We recently released fixes for the publicly disclosed FTP vulnerabilities. One of the after-effects of applying this update will be that recursive list commands to IIS FTP 5.x, 6.0 will return the non-recursive listing. To make it clear, this feature...
0 comments
Tags: IIS6IIS7IIS5XFTP
Oct 15, 2009
Microsoft has released security bulletin MS09-053 that will address the FTP vulnerabilities that were publicly disclosed a couple of weeks ago. The information in this bulletin supercedes the previous advisory.
1 comments
Tags: IIS6IIS7Windows SecurityIIS5XFTP
Sep 23, 2009
One of my coworkers, Vijay Sen, just forwarded the following eWeek review of IIS 7.5 to me: http://www.eweek.com/c/a/Windows/REVIEW-Microsoft-IIS-75-Improves-Management-Deployment-Options-822018/ The review was written by Jim Rapoza , and he said some...
3 comments
Tags: IIS TopicsFTP
Sep 17, 2009
In earlier blog posts I have mentioned that I written the several walkthroughs to help developers get started writing providers for the FTP 7.5 service, all of which available on Microsoft's learn.iis.net Web site under the " Developing for FTP 7.5 "...
2 comments
Tags: IIS TopicsFTP
Sep 10, 2009
As evidenced by my How to Use Managed Code (C#) to Create an FTP Authentication Provider with Dynamic IP Restrictions walkthrough and my other FTP authentication extensibility walkthroughs, I spend a lot of time trying to find ways to prevent unauthorized...
3 comments
Tags: IIS TopicsFTP
Sep 05, 2009
One of the changes that we made in FTP 7.0 and FTP 7.5 was to remove recursive directory listings, which are commonly retrieved by typing " ls -lR " from a command-line FTP client, which should send a command like " NLST -lR " over FTP to the server....
2 comments
Tags: ScriptingFTP
Sep 04, 2009
There have been two recently publicly disclosed vulnerabilities for FTP 5, FTP 5.1 and FTP 6. Wade has gone through great detail to explain what platforms are affected by each vulnerability in his blog post . Microsoft has released and refreshed an advisory...
2 comments
Tags: IIS6IIS7Windows SecurityIIS5XFTP
Sep 04, 2009
The public exposure of another vulnerability in the FTP stack has caused a revision in the Microsoft advisory. Please refer the advisory @ http://www.microsoft.com/technet/security/advisory/975191.mspx to get updated information on exposure and impact...
0 comments
Tags: IIS6IIS7Windows SecurityIIS5XFTP