IIS 6.0 CVE-2017-7269

Apply Microsoft security update KB3197835 immediately, available from https://support.microsoft.com/en-us/help/3197835/ (requires manual download for EOL systems no longer receiving Windows Update). If patching is not immediately feasible, disable the WebDAV publishing service entirely via IIS Manager (remove WebDAV web service extension) or Services console (stop 'WebClient' service and set startup to Disabled)-this eliminates attack surface but breaks WebDAV-dependent applications and workflows, requiring validation with application owners. For systems requiring WebDAV functionality, implement compensating controls: restrict access to WebDAV endpoints using firewall rules or IIS IP restrictions to trusted management networks only; deploy a reverse proxy or web application firewall (WAF) with rules blocking PROPFIND requests containing 'If' headers exceeding normal length thresholds (>256 bytes may indicate exploitation attempts); enable Enhanced Mitigation Experience Toolkit (EMET) if available to add exploit mitigation layers. Long-term remediation requires migrating workloads off Windows Server 2003/IIS 6.0 to supported platforms (Windows Server 2016+ with IIS 10.0+), as the platform's EOL status means future vulnerabilities will remain unpatched. Third-party micropatch providers like 0patch offer unofficial fixes for organizations unable to migrate immediately (https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html), though these lack Microsoft support.