Skip to content
Silicon Shecky

Silicon Shecky

Infosec Practitioner

  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

IIS 6.0 WebDAV Flaw Solutions

Posted on May 20, 2009 By Michael Kavka No Comments on IIS 6.0 WebDAV Flaw Solutions

IT World has a nice little article which gives some tools to help protect those running IIS 6.0 and earlier from the latest exploit. The fun thing is that they are both free tools from Microsoft that basically shut down the WebDAV protocol.

Microsoft has acknowledged the problem, but has not said if or when a patch for it will be available. Windows 2000 servers are more at risk from this vulnerability since WebDAV is turned on by default, in contrast to Windows 2003 where WebDAV is turned off by default.

So, there you have it. Go get the tools and lock it down.

Computers, Internet/Music, Security Tags:IIS 6.0, IIS 6.0 Fix, Microsoft, Security Holes, Security Tips, Web Security, WebDAV

Post navigation

Previous Post: Shecky Tweets for 2009-05-19
Next Post: Shecky Tweets for 2009-05-20

Related Posts

  • Security is Reactionary, No Matter What Security
  • Defender, KQL and Lockbit Microsoft
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General
  • Are you sure it is the execs? Ramblings

More Related Articles

Security is Reactionary, No Matter What Security
Defender, KQL and Lockbit Microsoft
Defense Layers: A Case Study Microsoft
Device vs. User Microsoft
Ransomware, Are You Ready? General
Are you sure it is the execs? Ramblings

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP
  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Connect

  • Bluesky
  • LinkedIn
  • Mastodon
  • RSS
  • Twitter

RSS feed: iFin Intel Feed iFin Intel Feed

  • YARA-X 1.22.0 Release, (Sun, Oct 25th) October 25, 2026
  • AI coding agents hijacked using AGENTS.md file in Downloads folder October 25, 2026 Bill Toulas
  • CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles October 25, 2026 aws@amazon.com
  • ripgrep as a lolbin October 25, 2026 adam
  • Solving practical problems with AI – Part 2 – the most popular, and most commonly used passwords for malicious archives… October 24, 2026 adam
  • Will AI expose the rickety infrastructure of the internet? October 24, 2026 Anthony Ha
  • PHP-ocalypse: How two critical web bugs almost broke the internet October 24, 2026 Zack Whittaker
  • BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot October 24, 2026 Bill Toulas
  • Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds October 24, 2026
  • CVE-2026-111497 Brotli Bug Reaches Far Beyond Node.js October 24, 2026 c0a15726-c5b1-4b0d-85e6-fe15553df9e2
  • OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found October 24, 2026
  • Vulnerabilities in PHP Affecting Cisco Products: October 2026 October 23, 2026

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP

RSS feed: iFin Intel Feed iFin Intel Feed

  • YARA-X 1.22.0 Release, (Sun, Oct 25th) October 25, 2026
  • AI coding agents hijacked using AGENTS.md file in Downloads folder October 25, 2026 Bill Toulas
  • CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles October 25, 2026 aws@amazon.com
  • ripgrep as a lolbin October 25, 2026 adam
  • Solving practical problems with AI – Part 2 – the most popular, and most commonly used passwords for malicious archives… October 24, 2026 adam
  • Will AI expose the rickety infrastructure of the internet? October 24, 2026 Anthony Ha
  • PHP-ocalypse: How two critical web bugs almost broke the internet October 24, 2026 Zack Whittaker
  • BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot October 24, 2026 Bill Toulas
  • Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds October 24, 2026
  • CVE-2026-111497 Brotli Bug Reaches Far Beyond Node.js October 24, 2026 c0a15726-c5b1-4b0d-85e6-fe15553df9e2
  • OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found October 24, 2026
  • Vulnerabilities in PHP Affecting Cisco Products: October 2026 October 23, 2026
  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Social Media

  • Bluesky
  • Mastodon
  • Twitter

Copyright © 2026 Silicon Shecky.