copyright | disclaimer | privacy | contact  
Australia's Leading Computer Emergency Response Team
 
Search this site

 
On this site

 > HOME
 > About AusCERT
 > Membership
 > Contact Us
 > PKI Services
 > Training
 > Publications
 > Sec. Bulletins
 > Conferences
 > News & Media
 > Services
 > Web Log
 > Site Map
 > Site Help
 > Member login





 

ESB-2000.070 -- Microsoft Security Bulletin (MS00-025) -- Procedure Available to Eliminate "Link View Server-Side Component" Vulnerability

Date: 18 April 2000

Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================

              AUSCERT External Security Bulletin Redistribution
                             
           ESB-2000.070 -- Microsoft Security Bulletin (MS00-025)
                 Procedure Available to Eliminate "Link View
                    Server-Side Component" Vulnerability
                                18 April 2000

===========================================================================

Microsoft Corporation has released the following security bulletin
concerning a procedure to eliminate a security vulnerability. This
vulnerability may allow a malicious user to cause a web server to crash,
or allow the user to run arbitrary code on the server.

This Microsoft bulletin has been updated several times but the remediation 
steps remain the same, such that a site running an affected web server 
should delete the affected file: Dvwssr.dll. 

Please see the following URL for complete information regarding this issue:

	http://www.microsoft.com/technet/security/bulletin/ms00-025.asp


===========================================================================

This security bulletin is provided as a service to AusCERT's members.
As AusCERT did not write the document referenced above, AusCERT has
had no control over its content.  The decision to use any or all
of this information is the responsibility of each user or organisation,
and should be done so in accordance with site policies and procedures.

If you have any questions or need further information, please contact 
Microsoft Corporation directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBOXXR7ih9+71yA2DNAQEIjQP9F/l8Znig3b+IlaDjO2q+3qV5gsy6a4En
tkKqJBoP7DATiVR5XTOpZwSgfo7MNZZ+koY+siVZ0O1Qsos/qrftOyIZPBFxoiA/
A/u1EGxUySf56oR0Zt8ixufkJI3DAhcFT49T6oiIHB0OXd1ncCGKRx4mtLStSnBu
dPX08nNOXnI=
=wCKc
-----END PGP SIGNATURE-----