Vulnerabilities > CVE-2002-0150 - Unspecified vulnerability in Microsoft products

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
microsoft
nessus
NVD
Published: 2002-04-22
Updated: 2024-11-20

Summary

Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Nessus

  • NASL familyWindows : Microsoft Bulletins
    NASL idSMB_NT_MS02-018.NASL
    descriptionThe remote version of Windows contains multiple flaws in the Internet Information Service (IIS), such as heap overflow, DoS, and XSS that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges.
    last seen2020-06-01
    modified2020-06-02
    plugin id10943
    published2002-04-23
    reporterThis script is Copyright (C) 2002-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/10943
    titleMS02-018: Cumulative Patch for Internet Information Services (327696)
  • NASL familyCGI abuses
    NASL idIIS_XSS_404.NASL
    descriptionThis IIS Server appears to be vulnerable to one of the cross-site scripting attacks described in MS02-018. The default
    last seen2020-06-01
    modified2020-06-02
    plugin id10936
    published2002-04-11
    reporterThis script is Copyright (C) 2002-2018 Matt Moore
    sourcehttps://www.tenable.com/plugins/nessus/10936
    titleMicrosoft IIS Multiple Vulnerabilities (MS02-018)

Oval

  • accepted2007-05-23T15:05:27.660-04:00
    classvulnerability
    contributors
    • nameTiffany Bergeron
      organizationThe MITRE Corporation
    • nameGlenn Strickland
      organizationSecure Elements, Inc.
    • nameJosh Turpin
      organizationSymantec Corporation
    descriptionBuffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
    familywindows
    idoval:org.mitre.oval:def:137
    statusdeprecated
    submitted2004-01-14T12:00:00.000-04:00
    titleDEPRECATED: Windows NT IIS HTTP Header Field Buffer Overflow
    version29
  • accepted2010-12-20T04:00:56.252-05:00
    classvulnerability
    contributors
    • nameTiffany Bergeron
      organizationThe MITRE Corporation
    • nameGlenn Strickland
      organizationSecure Elements, Inc.
    • nameShane Shaffer
      organizationG2, Inc.
    • nameJosh Turpin
      organizationSymantec Corporation
    • nameSudhir Gandhe
      organizationTelos
    • nameShane Shaffer
      organizationG2, Inc.
    descriptionBuffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
    familywindows
    idoval:org.mitre.oval:def:39
    statusdeprecated
    submitted2004-01-14T12:00:00.000-04:00
    titleDEPRECATED: Windows 2000 IIS HTTP Header Field Buffer Overflow
    version33

References