CVE-2002-0071
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 34%
exploitation probability
34%top 2% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
Affected products
n/a · n/aReferences
http://marc.info/?l=bugtraq&m=101854087828265&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A130https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A45http://www.atstake.com/research/advisories/2002/a041002-1.txthttp://www.cert.org/advisories/CA-2002-09.htmlhttp://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtmlhttp://www.iss.net/security_center/static/8799.phphttp://www.kb.cert.org/vuls/id/363715http://www.osvdb.org/3325http://www.securityfocus.com/bid/4474