|
Why the Delay?
Hologram
OSAll Staff
It´s been more than a week since eEye released an open-source exploit for use against Microsoft Internet Information Server, or IIS. IIS is, of course, the Web serving program which runs on 90% of the Windows NT servers on the Web.
The source code was made public, along with a detailed description of how the exploit worked. Unlike the earlier release of a similar Cold Fusion bug, however, a spout of Web defacements using the hole have not followed.
The bug, which is exploited with a simple buffer overflow trojan combination, is relatively straight-forward. The current word on IRC is, however, that the average script kiddie has had difficulty compiling the exploit.
The speculation continues that defacements using the IIS hole will begin shortly, once the average script kiddie becomes accustomed with the code. |
