CVE-2003-0702: Medium severity iss RealSecure Server Sensor vulnerability

Published Sep 3, 2003

Updated

Unknown vulnerability in an ISAPI plugin for ISS Server Sensor 7.0 XPU 20.16, 20.18, and possibly other versions before 20.19, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL.

Affected Software

2 affected components

iss RealSecure Server Sensor=7.0-xpu20.16

iss RealSecure Server Sensor=7.0-xpu20.18

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ISS RealSecure Server Sensor 7.0 XPU to a version that resolves this vulnerability.
Fixed in 20.19

Event History

Sep 3, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Oct 20, 2003

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0702?

CVE-2003-0702 has a high severity rating due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2003-0702?

To fix CVE-2003-0702, upgrade the ISS RealSecure Server Sensor to version 20.19 or later.

What are the affected versions related to CVE-2003-0702?

CVE-2003-0702 affects ISS RealSecure Server Sensor versions 7.0 XPU 20.16 and 20.18.

Can CVE-2003-0702 be exploited remotely?

Yes, CVE-2003-0702 can be exploited remotely through a specific URL accessed via SSL.

What consequences can result from CVE-2003-0702?

The consequences of CVE-2003-0702 include potential denial of service attacks and the execution of arbitrary code.