CVE-1999-0874
Internet Information Server 4.0 - Denial of Service via Malformed .HTR/.IDC/.STM Request
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-1999-0874.
PoCs published by Metasploit, Greg Hoglund, Stinko, including Metasploit module exploits/windows/iis/ms02_018_htr.
AI-analyzed exploit summary This exploit targets a buffer overflow in the ISAPI ISM.DLL used by IIS 4.0 to process HTR scripting. It sends a maliciously crafted HTTP GET request with an overly long .htr file path to trigger the overflow and execute arbitrary code.
Description
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Exploits (6)
This exploit targets a buffer overflow in the ISAPI ISM.DLL used by IIS 4.0 to process HTR scripting. It sends a maliciously crafted HTTP GET request with an overly long .htr file path to trigger the overflow and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in Microsoft IIS when handling .HTR, .STM, or .IDC file extensions. It crafts a malicious HTTP request to overwrite the stack and execute arbitrary code, with support for custom payloads.
This is a Metasploit module exploiting a buffer overflow in Microsoft IIS 4.0 via malformed .HTR requests. It targets specific Windows NT 4 service packs and delivers a payload to achieve remote code execution.
This Perl script exploits a buffer overflow vulnerability in Microsoft IIS by sending HTTP requests with overly long filenames using .HTR, .STM, or .IDC extensions. The script iterates through buffer sizes to trigger the overflow, potentially leading to remote code execution.
This exploit targets a buffer overflow vulnerability in Microsoft IIS 4.0 by sending a maliciously crafted HTTP request with an overly long URL containing shellcode. The exploit leverages the .HTR, .STM, or .IDC file extensions to trigger the overflow and execute arbitrary code.
This Metasploit module exploits a buffer overflow in the ISAPI ISM.DLL used to process HTR scripting in IIS 4.0. It targets Windows NT 4.0 Service Packs 3, 4, and 5, and achieves remote code execution by sending a maliciously crafted HTTP GET request.