Microsoft IIS 6.0 WebDAV ScStoragePathFromUrl 버퍼 오버플로우 원격 코드 실행 취약점 (CVE-2017-7269)

# IIS 6.0 WebDAV 웹 서비스 확장 비활성화 (adsutil.vbs 사용)
cscript.exe C:\Inetpub\AdminScripts\adsutil.vbs set W3SVC/WebSvcExtRestrictionList '0,C:\WINDOWS\system32\inetsrv\httpext.dll,0,WebDAV,WebDAV'

# 또는 WebDAV 기능이 불필요한 경우 IIS 서비스 자체를 중지
net stop w3svc

# IIS 6.0 설치 및 WebDAV 활성화 여부 점검
$iisVersion = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\INetStp' -ErrorAction SilentlyContinue).MajorVersion
if ($iisVersion -eq 6) {
    Write-Host '[WARNING] IIS 6.0 detected. Checking WebDAV status...' -ForegroundColor Yellow
    $metabase = [ADSI]'IIS://Localhost/W3SVC'
    $restrictions = $metabase.WebSvcExtRestrictionList
    foreach ($item in $restrictions) {
        if ($item -like '*httpext.dll*') {
            Write-Host '[CRITICAL] WebDAV Extension is configured in IIS 6.0: ' $item -ForegroundColor Red
        }
    }
} else {
    Write-Host '[INFO] IIS 6.0 is not installed or running on a different version.' -ForegroundColor Green
}