Advisories!: Microsoft Security Bulletin MS03-022: Flaw in ISAPI Extension for Windows Media
Microsoft Windows Media Services is a feature of Microsoft Windows
2000 Server, Advanced Server, and Datacenter Server and is also
available in a downloadable version for Windows NT 4.0 Server.
Windows Media Services contains support for a method of delivering
media content to clients across a network known as multicast
streaming. In multicast streaming, the server has no connection to
or knowledge of the clients that may be receiving the stream of
media content coming from the server. To facilitate logging of
client information for the server, Windows 2000 includes a
capability specifically designed to enable logging for multicast
transmissions.
This logging capability is implemented as an Internet Services
Application Programming Interface (ISAPI) extension - nsiislog.dll.
When Windows Media Services are added through add/remove programs to
Windows 2000, nsiislog.dll is installed in the Internet Information
Services (IIS) Scripts directory on the server. Once Windows Media
Services is installed, nsiislog.dll is automatically loaded and used
by IIS.
Microsoft encourages customers to review the Security Bulletins at:
http://www.microsoft.com/technet/security/bulletin/MS03-022.asp
Posted on Wednesday, 25 June 2003 @ 16:48:06 UTC by Paul (1010 reads) [ Trackback ]
