Free web form software for windows

Microsoft "Malformed Web Form Submission" Vulnerability Patch (IIS 5.0) MS00-100 is designed to be a useful program to remove a security vulnerability in a component that ships as part of Microsoft Internet Information Server. The vulnerability could potentially allow an attacker to prevent an affected Web server from providing useful service.

The FrontPage Server Extensions (FPSE) ship with and are installed by default as part of IIS 4.0 and 5.0. The most familiar FPSE functions allow Web site and content management; however, FPSE also provides browse-time support functions. Among the functions included in the latter category are ones that help process Web forms that have been submitted by a user. A vulnerability exists in one of these functions. If a malicious user levied a specially-malformed form submission to an affected server, it would cause the IIS service to fail. The vulnerability does not provide the opportunity to misuse any of the FPSE administrative or content management functions.

To resume normal operation on an IIS 4.0 server, the operator would need to restart the service. In contrast, if an IIS 5.0 server were attacked via this vulnerability, the IIS service would, by default, automatically restart almost immediately. Although any Web sessions that were in progress at the time of the attack would be lost, the server would be able to accept new connections as soon as the service was restarted. FPSE is installed by default as part of IIS 4.0 and 5.0, but, in keeping with best practices, Microsoft recommends that they be disabled if not needed.

Microsoft Internet Information Server 5.0 Patch: Malformed Web Form Submission Update is a reliable and useful update which resolves the "Malformed Web Form Submission" security vulnerability in FrontPage Server Extensions (FPSE) that ship as part of Internet Information Services (IIS) 5.0 and is discussed in Microsoft Security Bulletin MS00-100. Download now to prevent a malicious user from disrupting the operation of your Web server.

FPSE is a set of programs that run on an IIS Web server. Administrators can use FPSE to manage and develop content for a Web site. The component of FPSE that provides support for the processing of Web forms can process malformed submissions incorrectly. If a malicious user creates a specially malformed Web form and submits it to an affected server, the IIS service could fail. If this occurs, the IIS service automatically restarts, but any Web sessions that are in progress at the time of an attack are lost.