CVE-2002-0364: Buffer Overflow
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0364?
CVE-2002-0364 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2002-0364?
To fix CVE-2002-0364, upgrade to a more secure version of Internet Information Services, such as IIS 6.0 or later.
What software is affected by CVE-2002-0364?
CVE-2002-0364 affects Microsoft Internet Information Server versions 4.0 and 5.0.
Can CVE-2002-0364 be exploited remotely?
Yes, CVE-2002-0364 can be exploited remotely by attackers through specially crafted HTR requests.
What are the consequences of exploiting CVE-2002-0364?
Exploitation of CVE-2002-0364 can lead to a full compromise of the web server, allowing the attacker to execute malicious code.