CVE-2002-0079
Internet Information Server 4.0 and 5.0 - Buffer Overflow in Chunked Encoding Transfer Mechanism
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2002-0079. PoCs published by yuange, hsj, NeMeS||y.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in Microsoft IIS 4.0/5.0 via chunked encoding in ASP.dll. It includes shellcode to execute arbitrary commands, with configurable return addresses for different Windows versions.
Description
Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
Exploits (4)
This exploit targets a heap overflow vulnerability in Microsoft IIS 4.0/5.0 via chunked encoding in ASP.dll. It includes shellcode to execute arbitrary commands, with configurable return addresses for different Windows versions.
This exploit targets a heap overflow in Microsoft IIS 4.0/5.0 via chunked encoding in ASP, allowing remote code execution. It crafts a malicious HTTP request with shellcode to spawn a reverse shell.
This exploit targets a heap overflow vulnerability in Microsoft IIS 4.0 and 5.0 via chunked encoding transfer mechanism in Active Server Pages. It includes shellcode to achieve remote code execution (RCE) on vulnerable systems.
This exploit targets a heap overflow in Microsoft IIS 4.0/5.0 via chunked encoding in ASP, allowing remote code execution. It sends a crafted POST request with shellcode to trigger the vulnerability and spawns a reverse shell on port 1111.