CVE-2002-0079

2002-04-2204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

internet information server

iis 4.0

iis 5.0

buffer overflow

denial of service

code execution

7.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.965 High

EPSS

Percentile

99.6%

JSON

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

CPENameOperatorVersion
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0
microsoft:internet_information_servermicrosoft internet information servereq4.0

CPE	Name	Operator	Version
microsoft:internet_information_services	microsoft internet information services	eq	5.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0