CVE-2002-0149

2002-04-2204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

iis 4.0

iis 5.0

iis 5.1

buffer overflow

asp

server-side include

cve-2002-0149

nvd

7.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.215 Low

EPSS

Percentile

96.4%

JSON

Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.

CPENameOperatorVersion
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0
microsoft:internet_information_servermicrosoft internet information servereq4.0

CPE	Name	Operator	Version
microsoft:internet_information_services	microsoft internet information services	eq	5.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0