MS02-018: 2002³â 4¿ù, Internet Information Services¿ë ´©Àû ÆÐÄ¡

±â¼ú ÀÚ·á: 319733 - ÀÌ ¹®¼­°¡ Àû¿ëµÇ´Â Á¦Ç° º¸±â.
ÀÌ ¹®¼­´Â ÀÌÀü¿¡ ´ÙÀ½ ID·Î ÃâÆÇµÇ¾úÀ½: KR319733
¸ðµÎ È®´ë | ¸ðµÎ Ãà¼Ò

ÀÌ ÆäÀÌÁö¿¡¼­

¿ä¾à

Microsoft´Â ´ÙÀ½ Microsoft ±â¼ú ÀÚ·á ¹®¼­¿¡¼­ ¼³¸íÇÑ ¹®Á¦¿¡ ´ëÇÑ ¾÷µ¥ÀÌÆ®°¡ Æ÷ÇÔµÈ Internet Information Server(IIS) 4.0, Internet Information Services(IIS) 5.0 ¹× IIS 5.1¿ë ´©Àû ÆÐÄ¡¸¦ Ãâ½ÃÇß½À´Ï´Ù.
297860 MS01-044: IIS 5.0 º¸¾È ÆÐÄ¡¿Í IIS 4.0 ÆÐÄ¡
307934 Locking Down WebDAV Through ACL Still Allows PUT and DELETE Requests
313489 You Can Place Content Headers in the Body of a Response If an ISAPI Filter Is Installed
314339 MS02-018: Patch Available for Access Violation in URL Error Handling Vulnerability
316864 Problems with Adobe Acrobat 5.0 After You Install URLScan
317035 MS02-018: Patch Available for Cross-Site Scripting in Redirect Response Message Vulnerability
317196 MS02-018: Patch Available for Denial of Service Through FTP Status Request Vulnerability
317895 MS02-018: Patch Available for Cross-Site Scripting in IIS Help File Search Facility Vulnerability
318091 MS02-018: Patch Available for Buffer Overrun in HTR ISAPI Extension Vulnerability
319688 MS02-018: Patch Available for Chunked Encoding Transfer Mechanism Vulnerability
320374 MS02-018: Patch Available for Cross-site Scripting in Custom 404 Error Page Vulnerability

Ãß°¡ Á¤º¸

ÀÌ ÆÐÄ¡¿¡ ´ëÇÑ ÀÚ¼¼ÇÑ ³»¿ëÀº ´ÙÀ½ Microsoft À¥ »çÀÌÆ®¸¦ ¹æ¹®ÇϽʽÿÀ.
http://www.microsoft.com/korea/technet/security/bulletin/MS02-018.asp

Internet Information Services 5.1

±×¸² Ãà¼Ò±×¸² È®´ë
´Ù¿î·Îµå
Áö±Ý Q319733 ÆÐŰÁö ´Ù¿î·Îµå
Microsoft ´Ù¿î·Îµå ¼¾ÅÍ¿¡¼­ ´ÙÀ½ ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ½À´Ï´Ù.
¼³Ä¡ °ü¸®ÀÚ°¡ ÀÚµ¿À¸·Î IIS ¼­ºñ½º¸¦ ÁßÁöÇÏ°í ´Ù½Ã ½ÃÀÛÇϱ⠶§¹®¿¡ ÀÌ ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÑ ÈÄ¿¡ ÄÄÇ»Å͸¦ ´Ù½Ã ½ÃÀÛÇÒ Çʿ䰡 ¾ø½À´Ï´Ù.

Q319733 ÆÐŰÁö´Â ´ÙÀ½ ½ºÀ§Ä¡¸¦ Áö¿øÇÕ´Ï´Ù.
   -x   ³ªÁß ¼³Ä¡¸¦ À§ÇØ ÆÄÀÏ ¾ÐÃà Ç®±â
   -u   ¹«ÀÎ ¸ðµå
   -f   ½Ã½ºÅÛÀ» Á¾·áÇÒ ¶§ ´Ù¸¥ ÇÁ·Î±×·¥À» °­Á¦ Á¾·á
   -n   Á¦°Å¸¦ À§ÇØ ÆÄÀÏÀ» ¹é¾÷ÇÏÁö ¾ÊÀ½
   -o   ¸Þ½ÃÁö¸¦ Ç¥½ÃÇÏÁö ¾Ê°í OEM ÆÄÀÏÀ» µ¤¾î¾¸
   -z   ¼³Ä¡°¡ ¿Ï·áµÉ ¶§ ´Ù½Ã ½ÃÀÛÇÏÁö ¾ÊÀ½
   -q   ÀÚµ¿ ¸ðµå(»ç¿ëÀÚ °³ÀÔ ¾øÀ½)
   -l   ¼³Ä¡µÈ ÇÖÇȽº(Hotfix) ³ª¿­
ÀÌ ¼öÁ¤ ÇÁ·Î±×·¥ÀÇ ¿µ¾î ¹öÀüÀº ¾Æ·¡¿Í °°°Å³ª ±× ÀÌ»óÀÇ Æ¯¼ºÀ» °¡Áý´Ï´Ù. ÀÌ ÆÄÀÏÀÇ ³¯Â¥¿Í ½Ã°£Àº UTC(Coordinated Universal Time)·Î ³ª¿­µË´Ï´Ù. ÆÄÀÏ Á¤º¸¸¦ º¼ ¶§ ·ÎÄà ½Ã°£À¸·Î º¯È¯µË´Ï´Ù. UTC¿Í ·ÎÄà ½Ã°£ÀÇ Â÷ÀÌÁ¡À» ¾Ë·Á¸é Á¦¾îÆÇÀÇ ³¯Â¥ ¹× ½Ã°£ µµ±¸¿¡¼­ Ç¥ÁØ ½Ã°£´ë ÅÇÀ» »ç¿ëÇϽʽÿÀ.
   ³¯Â¥           ½Ã°£    ¹öÀü           Å©±â      ÆÄÀÏ À̸§
   -------------------------------------------------------
   27-Mar-2002  18:53  5.1.2600.41  338,944  Asp51.dll        
   20-Mar-2002  14:59                 2,411  Default.asp
   27-Mar-2002  18:53  5.1.2600.41  117,248  Ftpsv251.dll     
   27-Mar-2002  18:54  6.0.2600.41  240,640  Httpext.dll      
   20-Mar-2002  14:59                19,224  Query.asp
   20-Mar-2002  14:59                 6,527  Search.asp
   20-Mar-2002  20:12  5.1.2600.40    9,216  Spiisupd.exe     
   21-Mar-2002  17:43  5.2.1.0        3,584  Spmsg.dll        
   21-Mar-2002  17:46  5.2.1.0       41,472  Spuninst.exe     
   27-Mar-2002  18:53  5.1.2600.41  339,456  W3svc.dll        
¸±¸®½º ³¯Â¥: 2002³â 4¿ù 10ÀÏ

Microsoft Áö¿ø ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÏ´Â ¹æ¹ýÀº Microsoft ±â¼ú ÀÚ·áÀÇ ´ÙÀ½ ¹®¼­¸¦ ÂüÁ¶ÇϽʽÿÀ.
119591 ¿Â¶óÀÎ ¼­ºñ½º·ÎºÎÅÍ Microsoft Áö¿ø ÆÄÀϵéÀ» ±¸ÇÏ´Â ¹æ¹ý
Microsoft´Â ÆÄÀÏÀ» °Ô½ÃÇÑ ³¯Â¥¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ÃֽйÙÀÌ·¯½º ¿¹¹æ ÇÁ·Î±×·¥À¸·Î ÀÌ ÆÄÀÏÀ» °Ë»çÇß½À´Ï´Ù. ÀÏ´Ü ÆÄÀÏÀÌ °Ô½ÃµÇ¸é ¹«´ÜÀ¸·Î º¯°æÇÒ ¼ö ¾ø´Â º¸¾È ¼­¹ö¿¡ º¸°üµË´Ï´Ù.

Internet Information Services 5.0

±×¸² Ãà¼Ò±×¸² È®´ë
´Ù¿î·Îµå
Áö±Ý Q319733 ÆÐŰÁö ´Ù¿î·Îµå
Microsoft ´Ù¿î·Îµå ¼¾ÅÍ¿¡¼­ ´ÙÀ½ ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ½À´Ï´Ù.
¼³Ä¡ °ü¸®ÀÚ°¡ ÀÚµ¿À¸·Î IIS ¼­ºñ½º¸¦ ÁßÁöÇÏ°í ´Ù½Ã ½ÃÀÛÇϱ⠶§¹®¿¡ ÀÌ ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÑ ÈÄ¿¡ ÄÄÇ»Å͸¦ ´Ù½Ã ½ÃÀÛÇÒ Çʿ䰡 ¾ø½À´Ï´Ù.

Q319733 ÆÐŰÁö´Â ´ÙÀ½ ½ºÀ§Ä¡¸¦ Áö¿øÇÕ´Ï´Ù.
   -x ³ªÁß ¼³Ä¡¸¦ À§ÇØ ÆÄÀÏ ¾ÐÃà Ç®±â
   -y Á¦°Å ¼öÇà(/m ¶Ç´Â /q¿Í ÇÔ²²¸¸ »ç¿ë)
   -f ½Ã½ºÅÛÀ» Á¾·áÇÒ ¶§ ÀÀ¿ë ÇÁ·Î±×·¥À» °­Á¦ Á¾·á
   -n Á¦°Å µð·ºÅ͸®¸¦ ¸¸µéÁö ¾ÊÀ½
   -z ¾÷µ¥ÀÌÆ®°¡ ¿Ï·áµÉ ¶§ ´Ù½Ã ºÎÆÃÇÏÁö ¾ÊÀ½
   -q ÀÚµ¿ ¸ðµå -- »ç¿ëÀÚ °³ÀÔ ¾øÀ½
   -m ¹«ÀÎ ¸ðµå
   -l ¼³Ä¡µÈ ÇÖÇȽº(Hotfix) ³ª¿­
ÀÌ ¼öÁ¤ ÇÁ·Î±×·¥ÀÇ ¿µ¾î ¹öÀüÀº ¾Æ·¡¿Í °°°Å³ª ±× ÀÌ»óÀÇ Æ¯¼ºÀ» °¡Áý´Ï´Ù. ÀÌ ÆÄÀÏÀÇ ³¯Â¥¿Í ½Ã°£Àº UTC(Coordinated Universal Time)·Î ³ª¿­µË´Ï´Ù. ÆÄÀÏ Á¤º¸¸¦ º¼ ¶§ ·ÎÄà ½Ã°£À¸·Î º¯È¯µË´Ï´Ù. UTC¿Í ·ÎÄà ½Ã°£ÀÇ Â÷ÀÌÁ¡À» ¾Ë·Á¸é Á¦¾îÆÇÀÇ ³¯Â¥ ¹× ½Ã°£ µµ±¸¿¡¼­ Ç¥ÁØ ½Ã°£´ë ÅÇÀ» »ç¿ëÇϽʽÿÀ.
   ³¯Â¥           ½Ã°£    ¹öÀü             Å©±â      ÆÄÀÏ À̸§
   ----------------------------------------------------------
   03-Apr-2002  22:17  5.0.2195.5255  245,520  Adsiis.dll       
   03-Apr-2002  22:17  5.0.2195.5255  333,072  Asp.dll          
   22-Mar-2002  20:15                   2,413  Default.asp
   08-Oct-2001  20:38  4.0.2.4701     593,976  Fp4autl.dll      
   03-Apr-2002  22:17  5.0.2195.3649  299,792  Fscfg.dll        
   03-Apr-2002  22:17  5.0.2195.5255    8,464  Ftpctrs2.dll     
   03-Apr-2002  22:17  5.0.2195.5255    6,416  Ftpmib.dll       
   03-Apr-2002  22:17  5.0.2195.5255  117,008  Ftpsvc2.dll      
   04-Apr-2002  03:37  5.0.2195.5255  246,032  Httpext.dll      
   03-Apr-2002  22:17  5.0.2195.5255    9,488  Httpmib.dll      
   03-Apr-2002  22:17  5.0.2195.5255   56,592  Httpodbc.dll     
   03-Apr-2002  22:17  5.0.2195.4966  121,104  Idq.dll          
   03-Apr-2002  22:17  5.0.2195.5283   78,608  Iislog.dll       
   03-Apr-2002  22:17  5.0.2195.5255  122,640  Iisrtl.dll       
   03-Apr-2002  22:17  5.0.2195.5255   13,584  Infoadmn.dll     
   03-Apr-2002  22:17  5.0.2195.5255  246,032  Infocomm.dll     
   03-Apr-2002  22:17  5.0.2195.5255   62,736  Isatq.dll        
   03-Apr-2002  22:17  5.0.2195.5247   46,352  Ism.dll          
   03-Apr-2002  22:17  5.0.2195.5255   26,896  Mdsync.dll       
   03-Apr-2002  22:17  5.0.2195.4661   76,560  Msw3prt.dll      
   23-Mar-2002  00:36  5.0.2195.5247    6,416  Perfvd.exe       
   22-Mar-2002  20:15                  19,178  Query.asp
   22-Mar-2002  20:15                   5,571  Search.asp
   21-Mar-2002  20:06  5.0.2195.5217    9,488  Spiisupd.exe     
   03-Apr-2002  22:17  5.0.2195.5255   41,232  Ssinc.dll        
   03-Apr-2002  22:17  5.0.2195.5255    7,440  W3ctrs.dll       
   03-Apr-2002  22:17  5.0.2195.5269  348,944  W3svc.dll        
¸±¸®½º ³¯Â¥: 2002³â 4¿ù 10ÀÏ

Microsoft Áö¿ø ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÏ´Â ¹æ¹ýÀº Microsoft ±â¼ú ÀÚ·áÀÇ ´ÙÀ½ ¹®¼­¸¦ ÂüÁ¶ÇϽʽÿÀ.
119591 ¿Â¶óÀÎ ¼­ºñ½º·ÎºÎÅÍ Microsoft Áö¿ø ÆÄÀϵéÀ» ±¸ÇÏ´Â ¹æ¹ý
Microsoft´Â ÆÄÀÏÀ» °Ô½ÃÇÑ ³¯Â¥¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ÃֽйÙÀÌ·¯½º ¿¹¹æ ÇÁ·Î±×·¥À¸·Î ÀÌ ÆÄÀÏÀ» °Ë»çÇß½À´Ï´Ù. ÀÏ´Ü ÆÄÀÏÀÌ °Ô½ÃµÇ¸é ¹«´ÜÀ¸·Î º¯°æÇÒ ¼ö ¾ø´Â º¸¾È ¼­¹ö¿¡ º¸°üµË´Ï´Ù.

Internet Information Server 4.0

±×¸² Ãà¼Ò±×¸² È®´ë
´Ù¿î·Îµå
Áö±Ý Q319733 ÆÐŰÁö ´Ù¿î·Îµå
Microsoft ´Ù¿î·Îµå ¼¾ÅÍ¿¡¼­ ´ÙÀ½ ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÒ ¼ö ÀÖ½À´Ï´Ù.
¼³Ä¡¸¦ ¿Ï·áÇÏ·Á¸é ÀÌ ¾÷µ¥ÀÌÆ®¸¦ Àû¿ëÇÑ ÈÄ¿¡ ½Ã½ºÅÛÀ» ´Ù½Ã ½ÃÀÛÇϰųª IIS ¼­ºñ½º¸¦ ¼öµ¿À¸·Î ÁßÁöÇÏ°í ´Ù½Ã ½ÃÀÛÇØ¾ß ÇÕ´Ï´Ù.

Q319733 ÆÐŰÁö´Â ´ÙÀ½ ½ºÀ§Ä¡¸¦ Áö¿øÇÕ´Ï´Ù.
   -x ³ªÁß ¼³Ä¡¸¦ À§ÇØ ÆÄÀÏ ¾ÐÃà Ç®±â
   -y Á¦°Å ¼öÇà(/m ¶Ç´Â /q¿Í ÇÔ²²¸¸ »ç¿ë)
   -f ½Ã½ºÅÛÀ» Á¾·áÇÒ ¶§ ÀÀ¿ë ÇÁ·Î±×·¥À» °­Á¦ Á¾·á
   -n Á¦°Å µð·ºÅ͸®¸¦ ¸¸µéÁö ¾ÊÀ½
   -z ¾÷µ¥ÀÌÆ®°¡ ¿Ï·áµÉ ¶§ ´Ù½Ã ºÎÆÃÇÏÁö ¾ÊÀ½
   -q ÀÚµ¿ ¸ðµå -- »ç¿ëÀÚ °³ÀÔ ¾øÀ½
   -m ¹«ÀÎ ¸ðµå
   -l ¼³Ä¡µÈ ÇÖÇȽº(Hotfix) ³ª¿­
ÀÌ ¼öÁ¤ ÇÁ·Î±×·¥ÀÇ ¿µ¾î ¹öÀüÀº ¾Æ·¡¿Í °°°Å³ª ±× ÀÌ»óÀÇ Æ¯¼ºÀ» °¡Áý´Ï´Ù. ÀÌ ÆÄÀÏÀÇ ³¯Â¥¿Í ½Ã°£Àº UTC(Coordinated Universal Time)·Î ³ª¿­µË´Ï´Ù. ÆÄÀÏ Á¤º¸¸¦ º¼ ¶§ ·ÎÄà ½Ã°£À¸·Î º¯È¯µË´Ï´Ù. UTC¿Í ·ÎÄà ½Ã°£ÀÇ Â÷ÀÌÁ¡À» ¾Ë·Á¸é Á¦¾îÆÇÀÇ ³¯Â¥ ¹× ½Ã°£ µµ±¸¿¡¼­ Ç¥ÁØ ½Ã°£´ë ÅÇÀ» »ç¿ëÇϽʽÿÀ.
   ³¯Â¥           ½Ã°£    ¹öÀü          Å©±â      ÆÄÀÏ À̸§
   ----------------------------------------------------
   26-Mar-2002  21:53  4.2.775.1   214,544  Adsiis.dll       
   26-Mar-2002  21:53  4.2.775.1   330,672  Asp.dll          
   02-Apr-2001  19:55  4.0.2.4701  593,976  Fp4autl.dll      
   26-Mar-2002  21:52  4.2.775.1    81,888  Ftpsvc2.dll      
   26-Mar-2002  21:52  4.2.775.1    55,392  Httpodbc.dll     
   13-Jul-2001  19:14  5.0.1782.4  193,296  Idq.dll          
   26-Mar-2002  21:53  4.2.775.1    98,912  Iischema.dll     
   26-Mar-2002  21:51  4.2.775.1    63,472  Iislog.dll       
   26-Mar-2002  21:51  4.2.775.1   185,792  Infocomm.dll     
   26-Mar-2002  21:51  4.2.775.1    29,520  Iscomlog.dll     
   26-Mar-2002  21:55  4.2.775.1    54,560  Ism.dll          
   26-Mar-2002  21:53  4.2.775.1    31,872  Mdsync.dll       
   26-Mar-2002  21:56  4.2.775.1     9,680  Schmupd.exe      
   26-Mar-2002  21:52  4.2.775.1    38,256  Ssinc.dll        
   26-Mar-2002  21:52  4.2.775.1    25,360  Sspifilt.dll     
   26-Mar-2002  21:52  4.2.775.1   230,592  W3svc.dll        
   26-Mar-2002  21:52  4.2.775.1    88,032  Wam.dll                  
¸±¸®½º ³¯Â¥: 2002³â 4¿ù 10ÀÏ

Microsoft Áö¿ø ÆÄÀÏÀ» ´Ù¿î·ÎµåÇÏ´Â ¹æ¹ýÀº Microsoft ±â¼ú ÀÚ·áÀÇ ´ÙÀ½ ¹®¼­¸¦ ÂüÁ¶ÇϽʽÿÀ.
119591 ¿Â¶óÀÎ ¼­ºñ½º·ÎºÎÅÍ Microsoft Áö¿ø ÆÄÀϵéÀ» ±¸ÇÏ´Â ¹æ¹ý
Microsoft´Â ÆÄÀÏÀ» °Ô½ÃÇÑ ³¯Â¥¿¡ »ç¿ëÇÒ ¼ö ÀÖ´Â ÃֽйÙÀÌ·¯½º ¿¹¹æ ÇÁ·Î±×·¥À¸·Î ÀÌ ÆÄÀÏÀ» °Ë»çÇß½À´Ï´Ù. ÀÏ´Ü ÆÄÀÏÀÌ °Ô½ÃµÇ¸é ¹«´ÜÀ¸·Î º¯°æÇÒ ¼ö ¾ø´Â º¸¾È ¼­¹ö¿¡ º¸°üµË´Ï´Ù.

Windows NT Server 4.0, Terminal Edition

IIS´Â Microsoft Windows NT Server 4.0, Terminal Server Edition¿¡ »ç¿ëÇϵµ·Ï ¼³°èµÇÁö ¾Ê¾ÒÀ¸¸ç Áö¿øµÇÁö ¾Ê½À´Ï´Ù. Windows NT Server 4.0, Terminal Server Edition¿¡¼­ IIS 4.0À» ½ÇÇàÇÏ´Â °í°´Àº IIS 4.0À» Á¦°ÅÇÏ¿© ½Ã½ºÅÛÀ» º¸È£ÇÏ´Â °ÍÀÌ ÁÁ½À´Ï´Ù.

¼Ó¼º

±â¼ú ÀÚ·á: 319733 - ¸¶Áö¸· °ËÅä: 2006³â 3¿ù 29ÀÏ ¼ö¿äÀÏ - ¼öÁ¤: 2.2
º» ¹®¼­ÀÇ Á¤º¸´Â ´ÙÀ½ÀÇ Á¦Ç°¿¡ Àû¿ëµË´Ï´Ù.
  • Microsoft Internet Information Services 5.1
  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Server 4.0
Ű¿öµå:?
kbinfo kbfix kbwinxppresp1fix kbwin2000presp3fix kbqfe kbwin2000sp3fix kbsecurity kbwinnt400presp7fix kbwinxpsp1fix kbhotfixserver KB319733

Çǵå¹é º¸³»±â