ciao a tutti,
oggi ho ricevuto 2 attacchi di questo tipo, ho fatto il trace(si dice cosi) e ho visto che mi hanno attaccato dall'IRAN e da Shangai
Severity: High
This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.
Attack Category: Denial of Service
A wide range of exploits designed to interrupt basic network functions as opposed to stealing or modifying sensitive information.
Description
This signature detects attempts to overflow a buffer in the ISAPI extensions of the IIS server.
Additional Information
This signature detects large HTTP requests made to the .ida or .idq Internet Information Server (IIS) extensions. There is the potential for a buffer overflow in the idq.dll, which runs at the System security level, when handling URL requests. Once an attacker establishes a session on the web server and causes a buffer to overflow, he/she could perform virtually any function on that server.
c'è una correzione o posso fare qualcosa per stare + tranquillo?
Rispondi quotando