Stack Consumption Vulnerability in Microsoft IIS FTP Service
CVE-2009-2521

Currently unrated

Key Information:

Vendor: Microsoft
Status: Internet Information Services
Vendor: CVE Published:; 4 September 2009

What is CVE-2009-2521?

A vulnerability in the FTP Service of Microsoft Internet Information Services (IIS) 5.0 through 7.0 can be exploited by remote authenticated users to induce a denial of service. This occurs through the 'ls -R' command that includes a wildcard aimed at a subdirectory, succeeded by a '..' sequence. Successful exploitation can lead to the crashing of the FTP daemon, disrupting service availability. Administrators are advised to apply the relevant patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch