CVE-2002-0364

Internet Information Server 4.0-5.0 - Remote Code Execution via HTR Chunked Encoding Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4855
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/313819
Mailing List mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=102392308608100&w=2
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9327.php
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/276767
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=102392069305962&w=2
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29

Scores

EPSS 0.2390
EPSS Percentile 97.6%

Details

Status published
Products (2)
microsoft/internet_information_server 4.0
microsoft/internet_information_services 5.0
Published Jul 03, 2002
Tracked Since Feb 18, 2026