CVE-2002-0623

Microsoft Commerce Server 2000 and 2002 - Remote Code Execution via Long Authentication Data

Title source: llm

Description

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5112

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/5163

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9426.php

Scores

EPSS 0.1961

EPSS Percentile 97.1%

Details

Status published

Products (2)

microsoft/commerce_server 2000 (3 CPE variants)

microsoft/commerce_server 2002

Published Jul 03, 2002

Tracked Since Feb 18, 2026