CVE-2002-0071: Buffer Overflow
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0071?
CVE-2002-0071 has a high severity rating due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2002-0071?
To fix CVE-2002-0071, it is recommended to patch Microsoft Internet Information Server 4.0 and 5.0 to the latest versions provided by Microsoft.
What versions of IIS are affected by CVE-2002-0071?
CVE-2002-0071 affects Microsoft Internet Information Server versions 4.0 and 5.0.
Can CVE-2002-0071 lead to data breaches?
Yes, CVE-2002-0071 can lead to data breaches if attackers exploit the buffer overflow to execute arbitrary code.
Is CVE-2002-0071 still a risk today?
While CVE-2002-0071 targets older versions of IIS, any unpatched deployments may still pose a risk if they are still in use.