Bugtraq mailing list archives

WIN2000 and IIS


From: "Margaret CTR Rhodes" <Margaret.CTR.Rhodes () faa gov>
Date: Mon, 27 Aug 2001 13:35:32 -0400

This may be a subject answered in the past, but I haven't seen anything on it
lately.  

Yesterday, our systems administrator, Mike Miller of RS Information Systems,
loaded Win2000 on a server and deselected IIS.  Despite this, IIS loaded anyway
with no notification that the deselection had been ignored.  He tried this a
couple of times and our Incident Response team is testing it now.  The only way
he knew that it loaded was that he went in and checked the list of services--and
there it was!     
Is there any information out there about this on any version of W2K?

There were several people out there that may not have put the patch on because
they deselected IIS--and then were hit with Code Red.  

Here is the configuration of the machine.

It's a Gateway E-5200
Processor - Pentium III 600 MHZ
Memory - 256 MB
Adaptec 29160 Controller
Hard Drive - IBM DMVS 18.2 GB
Nic - 3C905c
Win2000 Basic

Maggie Rhodes
ISS Analyst
RS Information Systems




Current thread: