CVE

Id
7052  
CVE No.
CVE-2003-0224  
Status
Candidate  
Description
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."  
Phase
Assigned (20030430)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
41218 7052 CVE-2003-0224 NTBUGTRAQ:20030530 NSFOCUS SA2003-05: Microsoft IIS ssinc.dll Over-long Filename Buffer Overflow Vulnerability  View
41219 7052 CVE-2003-0224 URL:http://marc.info/?l=ntbugtraq&m=105431767100944&w=2  View
41220 7052 CVE-2003-0224 MS:MS03-018  View
41221 7052 CVE-2003-0224 URL:http://www.microsoft.com/technet/security/bulletin/ms03-018.asp  View
41222 7052 CVE-2003-0224 OVAL:oval:org.mitre.oval:def:483  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63434 JVNDB-2003-000160 Microsoft IIS の不正な ASPファイルの処理によるサービス運用妨害 (DoS) の脆弱性 Microsoft IIS には、ASP ファイルのヘッダに対するメモリサイズが適切に制限されていない脆弱性が存在します。 CVE-2003-0225 7052 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000160.html  View