Lucene search

K
cve[email protected]CVE-2002-0364
HistoryJul 03, 2002 - 4:00 a.m.

CVE-2002-0364

2002-07-0304:00:00
NVD-CWE-Other
web.nvd.nist.gov
42
iis 4.0
iis 5.0
buffer overflow
htr request sessions
web server compromise
cve-2002-0364

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.936 High

EPSS

Percentile

99.1%

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka “Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise.”

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.936 High

EPSS

Percentile

99.1%

Related for CVE-2002-0364