CSSLP: Certified Secure Software Lifecycle Professional

Question

John is a professional Ethical Hacker assigned to test the security of www.we-are-secure.com. He discovers that the We-are-secure server is vulnerable to attacks. As a countermeasure, he recommends that the Network Administrator remove the server's IPP printing capability. He is proposing this as a countermeasure against __________.

Explanation

Internet Printing Protocol (IPP) on affected IIS servers used an ISAPI extension with an unchecked buffer that could be exploited through a malformed printing request. Disabling IPP removes the vulnerable extension and mitigates the IIS buffer-overflow attack vector.

Learn more

Microsoft Security Bulletin MS01-023 — Unchecked Buffer in ISAPI Extension Could Enable Compromise of IIS 5.0 Server

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ142

Community Discussion