天空极速

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability

Bugtraq ID:   49303
Class:   Input Validation Error
CVE:   CVE-2011-3192
Remote:   Yes
Local:   No
Published:   Aug 24 2011 12:00AM
Updated:   Sep 02 2011 09:20AM
Credit:   Kingcope
Vulnerable:   Ubuntu Ubuntu Linux 8.04 LTS sparc
Ubuntu Ubuntu Linux 8.04 LTS powerpc
Ubuntu Ubuntu Linux 8.04 LTS lpia
Ubuntu Ubuntu Linux 8.04 LTS i386
Ubuntu Ubuntu Linux 8.04 LTS amd64
Ubuntu Ubuntu Linux 11.04 powerpc
Ubuntu Ubuntu Linux 11.04 i386
Ubuntu Ubuntu Linux 11.04 ARM
Ubuntu Ubuntu Linux 11.04 amd64
Ubuntu Ubuntu Linux 10.10 powerpc
Ubuntu Ubuntu Linux 10.10 i386
Ubuntu Ubuntu Linux 10.10 ARM
Ubuntu Ubuntu Linux 10.10 amd64
Ubuntu Ubuntu Linux 10.04 sparc
Ubuntu Ubuntu Linux 10.04 powerpc
Ubuntu Ubuntu Linux 10.04 i386
Ubuntu Ubuntu Linux 10.04 ARM
Ubuntu Ubuntu Linux 10.04 amd64
RedHat Enterprise Linux WS 4
RedHat Enterprise Linux ES 4
RedHat Enterprise Linux Desktop Workstation 5 client
RedHat Enterprise Linux AS 4
RedHat Enterprise Linux Desktop version 4
RedHat Enterprise Linux 5 server
Red Hat Enterprise Linux Workstation 6
Red Hat Enterprise Linux Server 6
Red Hat Enterprise Linux HPC Node Optional 6
Red Hat Enterprise Linux HPC Node 6
Red Hat Enterprise Linux Desktop Optional 6
Red Hat Enterprise Linux Desktop 6
Red Hat Enterprise Linux Desktop 5 client
IBM OS/400 V6R1M0
IBM HTTP Server 7.0 .11
IBM HTTP Server 6.1 .31
IBM HTTP Server 6.1 .27
IBM HTTP Server 6.1 .25
IBM HTTP Server 6.1 .19
IBM HTTP Server 6.1 .17
IBM HTTP Server 6.1 .15
IBM HTTP Server 6.0.2 .41
IBM HTTP Server 6.0.2 .35
IBM HTTP Server 6.0.2 .33
IBM HTTP Server 6.0.2 .27
IBM HTTP Server 6.0.2 .13
IBM HTTP Server 6.0.2
IBM HTTP Server 2.0.47
IBM HTTP Server 2.0.42
IBM HTTP Server 8.0
IBM HTTP Server 7.0.0.5
IBM HTTP Server 7.0.0.17
IBM HTTP Server 7.0.0.15
IBM HTTP Server 7.0.0.13
IBM HTTP Server 7.0
IBM HTTP Server 6.1.0.39
IBM HTTP Server 6.1.0.35
IBM HTTP Server 6.1.0.13
IBM HTTP Server 6.1.0.1
IBM HTTP Server 6.1.0
IBM HTTP Server 6.0.2.43
IBM HTTP Server 6.0.2.23
IBM HTTP Server 6.0.2.19
IBM HTTP Server 6.0.2.12
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
Cisco Wireless Control System Software 4.0.96
Cisco Wireless Control System Software 4.0.95
Cisco Wireless Control System Software 4.0
Cisco Wireless Control System Software 4.1
Cisco Wireless Control System Software 3.2
Cisco Wireless Control System for Windows 0
Cisco Wireless Control System for Linux 0
Cisco Wireless Control System 7.0.164
Cisco Wireless Control System 7.0.163
Cisco Wireless Control System 4.2.62 .0
Cisco Wireless Control System 4.0.100 .0
Cisco Wireless Control System 6.0.181.0
Cisco Wireless Control System 5.2
Cisco Wireless Control System 4.2
Cisco Wireless Control System 4.1.91.0
Cisco Wireless Control System 0
Cisco Video Surveillance Operations Manager Software 0
Cisco Video Surveillance Manager 0
Cisco TelePresence Video Communication Server (VCS) 0
Cisco Quad 0
Cisco NX-OS 4.1(4)
Cisco NX-OS 4.1(3)N2(1a)
Cisco NX-OS 4.0(1a)N2(1)
Cisco NX-OS 0
Cisco Nexus 7000 0
Cisco MDS 9000
Cisco Management Center for Cisco Security Agent 0
Cisco CTS TelePresence Systems 0
Apache Software Foundation Apache 2.3.6
Apache Software Foundation Apache 2.3.5
Apache Software Foundation Apache 2.3.4
Apache Software Foundation Apache 2.3.2
Apache Software Foundation Apache 2.3.1
Apache Software Foundation Apache 2.3
Apache Software Foundation Apache 2.2.15
Apache Software Foundation Apache 2.2.14
Apache Software Foundation Apache 2.2.13
Apache Software Foundation Apache 2.2.12
Apache Software Foundation Apache 2.2.11
Apache Software Foundation Apache 2.2.10
Apache Software Foundation Apache 2.2.9
Apache Software Foundation Apache 2.2.8
Apache Software Foundation Apache 2.2.6
Apache Software Foundation Apache 2.2.5
Apache Software Foundation Apache 2.2.4
Apache Software Foundation Apache 2.2.3
Apache Software Foundation Apache 2.2.2
Apache Software Foundation Apache 2.2 .0
Apache Software Foundation Apache 2.1.9
Apache Software Foundation Apache 2.1.8
Apache Software Foundation Apache 2.1.7
Apache Software Foundation Apache 2.1.6
Apache Software Foundation Apache 2.1.5
Apache Software Foundation Apache 2.1.4
Apache Software Foundation Apache 2.1.3
Apache Software Foundation Apache 2.1.2
Apache Software Foundation Apache 2.1.1
Apache Software Foundation Apache 2.1
Apache Software Foundation Apache 2.0.63
Apache Software Foundation Apache 2.0.61
Apache Software Foundation Apache 2.0.60
Apache Software Foundation Apache 2.0.59
Apache Software Foundation Apache 2.0.58
Apache Software Foundation Apache 2.0.57
Apache Software Foundation Apache 2.0.56 -dev
Apache Software Foundation Apache 2.0.56
Apache Software Foundation Apache 2.0.55
Apache Software Foundation Apache 2.0.54
Apache Software Foundation Apache 2.0.53
Apache Software Foundation Apache 2.0.52
Apache Software Foundation Apache 2.0.51
Apache Software Foundation Apache 2.0.50
Apache Software Foundation Apache 2.0.49
Apache Software Foundation Apache 2.0.48
+ MandrakeSoft Linux Mandrake 10.0 AMD64
+ MandrakeSoft Linux Mandrake 10.0
+ S.u.S.E. Linux 8.1
+ S.u.S.E. Linux Personal 9.0 x86_64
+ S.u.S.E. Linux Personal 9.0
+ S.u.S.E. Linux Personal 8.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
Apache Software Foundation Apache 2.0.47
Apache Software Foundation Apache 2.0.46
Apache Software Foundation Apache 2.0.45
Apache Software Foundation Apache 2.0.44
Apache Software Foundation Apache 2.0.43
Apache Software Foundation Apache 2.0.42
Apache Software Foundation Apache 2.0.41
Apache Software Foundation Apache 2.0.40
+ RedHat Linux 9.0 i386
+ RedHat Linux 8.0
+ Terra Soft Solutions Yellow Dog Linux 3.0
Apache Software Foundation Apache 2.0.39
Apache Software Foundation Apache 2.0.38
Apache Software Foundation Apache 2.0.37
Apache Software Foundation Apache 2.0.36
Apache Software Foundation Apache 2.0.35
Apache Software Foundation Apache 2.0.34 -BETA
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Server
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT Enterprise Server 4.0 SP6a
- Microsoft Windows NT Enterprise Server 4.0 SP6a
- Microsoft Windows NT Enterprise Server 4.0 SP6
- Microsoft Windows NT Enterprise Server 4.0 SP6
- Microsoft Windows NT Enterprise Server 4.0 SP5
- Microsoft Windows NT Enterprise Server 4.0 SP5
- Microsoft Windows NT Enterprise Server 4.0 SP4
- Microsoft Windows NT Enterprise Server 4.0 SP4
- Microsoft Windows NT Enterprise Server 4.0 SP3
- Microsoft Windows NT Enterprise Server 4.0 SP3
- Microsoft Windows NT Enterprise Server 4.0 SP2
- Microsoft Windows NT Enterprise Server 4.0 SP2
- Microsoft Windows NT Enterprise Server 4.0 SP1
- Microsoft Windows NT Enterprise Server 4.0 SP1
- Microsoft Windows NT Enterprise Server 4.0
- Microsoft Windows NT Enterprise Server 4.0
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Server 4.0 SP6a
- Microsoft Windows NT Server 4.0 SP6
- Microsoft Windows NT Server 4.0 SP6
- Microsoft Windows NT Server 4.0 SP5
- Microsoft Windows NT Server 4.0 SP5
- Microsoft Windows NT Server 4.0 SP4
- Microsoft Windows NT Server 4.0 SP4
- Microsoft Windows NT Server 4.0 SP3
- Microsoft Windows NT Server 4.0 SP3
- Microsoft Windows NT Server 4.0 SP2
- Microsoft Windows NT Server 4.0 SP2
- Microsoft Windows NT Server 4.0 SP1
- Microsoft Windows NT Server 4.0 SP1
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Terminal Server 4.0 SP6a
- Microsoft Windows NT Terminal Server 4.0 SP6
- Microsoft Windows NT Terminal Server 4.0 SP6
- Microsoft Windows NT Terminal Server 4.0 SP5
- Microsoft Windows NT Terminal Server 4.0 SP5
- Microsoft Windows NT Terminal Server 4.0 SP4
- Microsoft Windows NT Terminal Server 4.0 SP4
- Microsoft Windows NT Terminal Server 4.0 SP3
- Microsoft Windows NT Terminal Server 4.0 SP3
- Microsoft Windows NT Terminal Server 4.0 SP2
- Microsoft Windows NT Terminal Server 4.0 SP2
- Microsoft Windows NT Terminal Server 4.0 SP1
- Microsoft Windows NT Terminal Server 4.0 SP1
- Microsoft Windows NT Terminal Server 4.0
- Microsoft Windows NT Terminal Server 4.0
- Microsoft Windows NT Workstation 4.0 SP6a
- Microsoft Windows NT Workstation 4.0 SP6
- Microsoft Windows NT Workstation 4.0 SP6
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP5
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP4
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP3
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP2
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0 SP1
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows XP Home
- Microsoft Windows XP Home
- Microsoft Windows XP Professional
- Microsoft Windows XP Professional
Apache Software Foundation Apache 2.0.32 -BETA
Apache Software Foundation Apache 2.0.32
Apache Software Foundation Apache 2.0.28 -BETA
Apache Software Foundation Apache 2.0.28 Beta
Apache Software Foundation Apache 2.0.28
Apache Software Foundation Apache 2.0.9
Apache Software Foundation Apache 2.0 a9
Apache Software Foundation Apache 2.0
Apache Software Foundation Apache 1.3.68
Apache Software Foundation Apache 1.3.65
Apache Software Foundation Apache 1.3.42
Apache Software Foundation Apache 1.3.41
Apache Software Foundation Apache 1.3.39
Apache Software Foundation Apache 1.3.38
Apache Software Foundation Apache 1.3.37
Apache Software Foundation Apache 1.3.36
Apache Software Foundation Apache 1.3.35 -dev
Apache Software Foundation Apache 1.3.34
Apache Software Foundation Apache 1.3.33
Apache Software Foundation Apache 1.3.32
+ Gentoo Linux 1.4
+ Gentoo Linux
Apache Software Foundation Apache 1.3.31
+ OpenPKG OpenPKG Current
Apache Software Foundation Apache 1.3.30
Apache Software Foundation Apache 1.3.29
+ Apple Mac OS X 10.3.5
+ Apple Mac OS X 10.2.7
+ Apple Mac OS X Server 10.3.5
+ Apple Mac OS X Server 10.2.7
+ MandrakeSoft Linux Mandrake 10.0 AMD64
+ MandrakeSoft Linux Mandrake 10.0
+ OpenPKG OpenPKG 2.0
Apache Software Foundation Apache 1.3.28
+ Conectiva Linux 8.0
+ MandrakeSoft Linux Mandrake 9.2 amd64
+ MandrakeSoft Linux Mandrake 9.2
+ OpenBSD OpenBSD 3.4
+ OpenPKG OpenPKG 1.3
Apache Software Foundation Apache 1.3.27
+ HP HP-UX (VVOS) 11.0 4
+ HP VirtualVault 4.6
+ HP VirtualVault 4.5
+ HP Webproxy 2.0
+ Immunix Immunix OS 7+
+ MandrakeSoft Linux Mandrake 9.1 ppc
+ MandrakeSoft Linux Mandrake 9.1
+ OpenBSD OpenBSD 3.3
+ OpenPKG OpenPKG Current
+ RedHat Enterprise Linux AS 2.1 IA64
+ RedHat Enterprise Linux AS 2.1
+ RedHat Enterprise Linux ES 2.1 IA64
+ RedHat Enterprise Linux ES 2.1
+ RedHat Enterprise Linux WS 2.1 IA64
+ RedHat Enterprise Linux WS 2.1
+ RedHat Linux Advanced Work Station 2.1
+ SGI IRIX 6.5.19
Apache Software Foundation Apache 1.3.26
+ Conectiva Linux 8.0
+ Conectiva Linux 7.0
+ Conectiva Linux 6.0
+ Debian Linux 3.0 sparc
+ Debian Linux 3.0 s/390
+ Debian Linux 3.0 ppc
+ Debian Linux 3.0 mipsel
+ Debian Linux 3.0 mips
+ Debian Linux 3.0 m68k
+ Debian Linux 3.0 ia-64
+ Debian Linux 3.0 ia-32
+ Debian Linux 3.0 hppa
+ Debian Linux 3.0 arm
+ Debian Linux 3.0 alpha
+ MandrakeSoft Corporate Server 2.1 x86_64
+ MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Linux Mandrake 9.0
+ OpenPKG OpenPKG 1.1
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.1
Apache Software Foundation Apache 1.3.25
Apache Software Foundation Apache 1.3.24
Apache Software Foundation Apache 1.3.23
Apache Software Foundation Apache 1.3.22
Apache Software Foundation Apache 1.3.20
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
Apache Software Foundation Apache 1.3.19
Apache Software Foundation Apache 1.3.18
Apache Software Foundation Apache 1.3.17
Apache Software Foundation Apache 1.3.16
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows 98
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows NT 4.0
Apache Software Foundation Apache 1.3.15
Apache Software Foundation Apache 1.3.14 Mac
Apache Software Foundation Apache 1.3.14
Apache Software Foundation Apache 1.3.13
Apache Software Foundation Apache 1.3.12
Apache Software Foundation Apache 1.3.11
Apache Software Foundation Apache 1.3.10
Apache Software Foundation Apache 1.3.9
Apache Software Foundation Apache 1.3.8
Apache Software Foundation Apache 1.3.7 -dev
Apache Software Foundation Apache 1.3.7
Apache Software Foundation Apache 1.3.6
Apache Software Foundation Apache 1.3.5
Apache Software Foundation Apache 1.3.4
Apache Software Foundation Apache 1.3.3
+ RedHat Linux 5.2 sparc
+ RedHat Linux 5.2 i386
+ RedHat Linux 5.2 alpha
Apache Software Foundation Apache 1.3.2
Apache Software Foundation Apache 1.3.1
Apache Software Foundation Apache 1.3
+ Apple Mac OS X 10.3.2
+ Apple Mac OS X 10.3.1
+ Apple Mac OS X 10.3
+ Apple Mac OS X 10.2.8
+ Apple Mac OS X 10.2.7
+ Apple Mac OS X 10.2.6
+ Apple Mac OS X 10.2.5
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X 10.2.3
+ Apple Mac OS X 10.2.2
+ Apple Mac OS X 10.2.1
+ Apple Mac OS X 10.2
+ Apple Mac OS X 10.1.5
+ Apple Mac OS X 10.1.4
+ Apple Mac OS X 10.1.3
+ Apple Mac OS X 10.1.2
+ Apple Mac OS X 10.1.1
+ Apple Mac OS X 10.1
+ Apple Mac OS X Server 10.3.2
+ Apple Mac OS X Server 10.3.1
+ Apple Mac OS X Server 10.3
+ Apple Mac OS X Server 10.2.8
+ Apple Mac OS X Server 10.2.7
+ Apple Mac OS X Server 10.2.6
+ Apple Mac OS X Server 10.2.5
+ Apple Mac OS X Server 10.2.4
+ Apple Mac OS X Server 10.2.3
+ Apple Mac OS X Server 10.2.2
+ Apple Mac OS X Server 10.2.1
+ Apple Mac OS X Server 10.2
+ Apple Mac OS X Server 10.1.5
+ Apple Mac OS X Server 10.1.4
+ Apple Mac OS X Server 10.1.3
+ Apple Mac OS X Server 10.1.2
+ Apple Mac OS X Server 10.1.1
+ Apple Mac OS X Server 10.1
- Microsoft Windows 2000 Professional
- Microsoft Windows NT 4.0
Apache Software Foundation Apache 2.3.38-dev
Apache Software Foundation Apache 2.3.3
Apache Software Foundation Apache 2.2.7-dev
Apache Software Foundation Apache 2.2.6-dev
Apache Software Foundation Apache 2.2.5-dev
Apache Software Foundation Apache 2.2.19
Apache Software Foundation Apache 2.2.18
Apache Software Foundation Apache 2.2.17
Apache Software Foundation Apache 2.2.16
Apache Software Foundation Apache 2.2.15-dev
Apache Software Foundation Apache 2.2.1
Apache Software Foundation Apache 2.2
Apache Software Foundation Apache 2.0.64-dev
Apache Software Foundation Apache 2.0.62-dev
Apache Software Foundation Apache 2.0.61-dev
Apache Software Foundation Apache 2.0.60-dev
Apache Software Foundation Apache 1.3.40-dev
Apache Software Foundation Apache 1.3.35
Apache Software Foundation Apache 1.3

Not Vulnerable:   Apache Software Foundation Apache 2.2.20

    近期Apache Web服务器被发现存在“Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞”（CVE ID：CVE-2011-3192），攻击者只要能够连接服务器，通过发送畸形的恶意请求，即可使服务器失去响应致使无法提供正常的服务。Apache HTTP Server由于其开源及跨平台的特性，是目前互联网上使用最广泛的Web服务器程序，而且此漏洞几乎影响当前全部版本的Apache服务器，因此需引起相关用户的高度重视。

    此漏洞是一个0day漏洞，技术细节及相应的利用代码已经公开，也已经出现了利用此漏洞进行攻击的案例。Apache软件基金会已得知此漏洞的存在并开始处理，目前还没有提供正式的补丁或新版本的软件。

在完整补丁发布前，Apache给出了以下几个应对措施：

1、启用SetEnvlf和mod_rewrite检测访问中是否有大量的Range，若有的话，则忽略该Range请求头或直接拒绝请求。
    Option 1：（适用于Apache 2.0、2.2）

   Option 2：（也适用于Apache 1.3）

2、限制访问字段大小为几百字节。

3、使用mod_header来彻底禁止Range header的使用。

4、部署一个Range header计数模块来进行临时的监测。

5、及时关注并安装下面链接中发布的补丁：

今天帮小俊安装服务器上的SQL Server 2005，发现有两个问题，无法正常安装下去。
问题一：COM+ 目录要求 错误
解决：
在命令行下执行：
msdtc -install

然后打开“服务”，将“COM+ System Application”服务设为自动启动，并顺手将该服务启动起来即可。

注：
如果安装一次失败过，则其他以下方法进行修复：
1、打开注册表编辑器，删除以下几个键值：
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC
HKEY_CLASSES_ROOT\CID

2、停止MSDTC服务：net stop msdtc

3、卸载MSDTC服务：msdtc -uninstall

4、重新安装MSDTC服务：msdtc -install

5、重新服务器重新安装SQL Server 2005即可。


问题二、版本变更检查（警告）
解决：在命令行模式中执行SQL Server 2005的安装程序（setup.exe）。
进行命令行模式，切换到SQL Server 2005安装程序所在的目录，然后执行：
F:\MS_SQL_2005_SP3_ALL_DVD\Enterprise\Servers>setup.exe SKUUPGRADE=1 （注意：SKUUPGRADE一定要大写）

OK，Windows里弹出SQL Server 2005的安装程序，点击“下一步”进行安装吧。

 

Microsoft IIS 5.0/6.0 FTP Server远程堆栈溢出漏洞
详情请参阅以下文章:
http://www.milw0rm.com/exploits/9541
http://www.milw0rm.com/exploits/9559




Exploit code：
#!/usr/bin/perl
# IIS 5.0 FTP Server / Remote SYSTEM exploit
# Win2k SP4 targets
# bug found & exploited by Kingcope, kcope2<at>googlemail.com
# Affects IIS6 with stack cookie protection
# Modded by muts, additional egghunter added for secondary larger payload
# Might take a minute or two for the egg to be found.
# Opens bind shell on port 4444

# http://www.offensive-security.com/0day/msftp.pl.txt

SQL SERVER 2005 SP3的企业\开发\标准三合一版，最近MS刚刚更新了SP3补丁，
特制作此包含SP3的三合一版，希望可以给大家带来新的安装体验，不用等那么长时间了！

首次运行背景，同上一版没有变化：


SP2的信息截图：


SP3的信息截图：


大小: 2110496768 字节
MD5: AE3ABD0E39EF120ECA28E01A16FA3831
SHA1: E89F94F7DBFB989FB0D1EB712873A75BA1510228
CRC32: 08FB9513

下载地址：http://www.rayfile.com/files/07d6b902-1439-11de-a327-0014221b798a/

在Windows操作系统上安装SQL SERVER2000需要序列号
解决办法：
打开注册表编辑器并定位到：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager 找到名为“SafeDLLSearchMode”的DWORD值，修改它的值为0。
如果没有则创建这个DWORD值，将值设为0即可。