Archives

Archives / 2007 / January
  • Tricking Rapid Fail Protection

    If an attacker or a piece of poorly written code can crash an IIS worker process you might face a Denial-of-Service condition. IIS would spawn up a new worker process which crashes again as soon as it executes the vulnerable code. Spawning up processes is a pretty expensive operation on Windows and constantly trying to start new worker processes might bring your web server to a halt. And that's why the Rapid Fail Protection feature was introduced in IIS6.