0-day in Microsoft IIS 5/6 FTP

A 0-day exploit in Microsoft IIS 5/6 FTP was recently published on Milw0rm while HDMoore is porting the bug to Metasploit.

Alienvault’s feed customers are protected with the directive released today:

45046 :AV Possible 0day IIS FTP Exploit against DST_IP

http://isc.sans.org/diary.html?storyid=7039

UPDATE:

We have previously coverage with two directives present on Alienvault Professional Feed:

45024: AV Possible FTP Exploit attempt against DST_IP

45025: AV Possible FTP Exploit attempt against DST_IP (FTP preprocessor)