News for hackers. Stuff that matters.

A comment on Remote Kernel Code Execution Via HTTP Request In IIS On Windows. Parent comment

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by Khao on Wednesday April 15, 2015 @11:55AM (#9381804)
Did you have to configure any rule in the Output Caching or that's completely default values?
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by davman on Wednesday April 15, 2015 @12:02PM (#9381877)
I initially configured rules (I was following your instructions) but I've now deleted the rules and still have the crash.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by artanis0 on Wednesday April 15, 2015 @12:29PM (#9382115)
Can confirm. No Output Caching rules defined, I am still able to reproduce crash. [EDIT] What is handy is that it appears that disabling "Enable kernel cache" takes effect immediately. No iisreset or server reboot required in my testing environment.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by davman on Wednesday April 15, 2015 @12:34PM (#9382153)
Yes, unticking that checkbox works for me instantly.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by Khao on Wednesday April 15, 2015 @12:09PM (#9381925)
Damnit. I'll double-check on my side too and update my answer accordingly. I don't want people to think they're safe if they're not!
[ Parent | on HN ]