National Vulnerability Database (CVE-2002-0150)

National Cyber-Alert System Vulnerability Summary: CVE-2002-0150
Orirignal release date: 2002-04-22 Source: US-CERT/NIST ### Overview Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: input buffer="1" Impact Type: avail,sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: Microsoft Name: Cumulative Patch for Internet Information Services Hyperlink: http://www.microsoft.com/technet/security/bulletin/ms02-018.asp External Source: Security Focus Name: amp Hyperlink: http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info& ### Vulnerable Software and Vendor IIS (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0150