NVD

Id
79088  
Name
CVE-2002-0072  
Description
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-05  
Published
2002-04-22  
Modified Date
2016-10-17  
Seq
2002-0072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394842 79088 CVE-2002-0072 20020411 KPMG-2002009: Microsoft IIS W3SVC Denial of Service  View
394843 79088 CVE-2002-0072 CA-2002-09  View
394844 79088 CVE-2002-0072 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018  View
394845 79088 CVE-2002-0072 iis-isapi-filter-error-dos(8800)  View
394846 79088 CVE-2002-0072 VU#521059  View
394847 79088 CVE-2002-0072 MS02-018  View
394848 79088 CVE-2002-0072 4479  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63751 JVNDB-2002-000078 Microsoft IIS の URL 処理におけるサービス運用妨害 (DoS) の脆弱性 FrontPage Server Extensions と ASP.NET に含まれている ISAPI フィルタには、Microsoft IIS を介して異常に長い URL 要求を受信した際のエラー処理において、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2002-0072 4466 CVE-2002-0072 79088 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000078.html 2002-04-10 2007-04-01 View