CVE

Id
4756  
CVE No.
CVE-2002-0364  
Status
Entry  
Description
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
23877 4756 CVE-2002-0364 BUGTRAQ:20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612]  View
23878 4756 CVE-2002-0364 URL:http://marc.info/?l=bugtraq&m=102392069305962&w=2  View
23879 4756 CVE-2002-0364 NTBUGTRAQ:20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow  View
23880 4756 CVE-2002-0364 URL:http://marc.info/?l=ntbugtraq&m=102392308608100&w=2  View
23881 4756 CVE-2002-0364 VULNWATCH:20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612]  View
23882 4756 CVE-2002-0364 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html  View
23883 4756 CVE-2002-0364 BUGTRAQ:20020613 VNA - .HTR HEAP OVERFLOW  View
23884 4756 CVE-2002-0364 URL:http://online.securityfocus.com/archive/1/276767  View
23885 4756 CVE-2002-0364 CERT-VN:VU#313819  View
23886 4756 CVE-2002-0364 URL:http://www.kb.cert.org/vuls/id/313819  View
23887 4756 CVE-2002-0364 MS:MS02-028  View
23888 4756 CVE-2002-0364 URL:http://www.microsoft.com/technet/security/bulletin/ms02-028.asp  View
23889 4756 CVE-2002-0364 BID:4855  View
23890 4756 CVE-2002-0364 URL:http://www.securityfocus.com/bid/4855  View
23891 4756 CVE-2002-0364 XF:iis-htr-chunked-encoding-bo(9327)  View
23892 4756 CVE-2002-0364 URL:http://www.iss.net/security_center/static/9327.php  View
23893 4756 CVE-2002-0364 OVAL:oval:org.mitre.oval:def:182  View
23894 4756 CVE-2002-0364 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:182  View
23895 4756 CVE-2002-0364 OVAL:oval:org.mitre.oval:def:29  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63774 JVNDB-2002-000101 Microsoft IIS における不正な HTR リクエストを利用したバッファオーバーフローの脆弱性 Microsoft IIS には、 不正なデータが挿入された HTR リクエストを受信した場合、HTR ISAPI エクステンションにおいてエラーが引き起こされ、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2002-0364 4756 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000101.html  View