So, IIS doesn't use http.sys? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

jenscow on April 16, 2015 | parent | context | favorite | on: Remote Kernel Code Execution Via HTTP Request In I...

So, IIS doesn't use http.sys?

nbevans on April 16, 2015 [–]

It does. But this vulnerability is specifically with HTTP.SYS. HTTP.SYS is kind of like a SSL terminator and request router built into the OS.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact