Lucene search
HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0623
cve-2002-0623
buffer overflow
authfilter
isapi filter
microsoft commerce server
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.065 Low
EPSS
Percentile
93.8%
Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka “New Variant of the ISAPI Filter Buffer Overrun”.
Affected configurations
Node
microsoftcommerce_serverMatch2000
ORmicrosoftcommerce_serverMatch2000sp1
ORmicrosoftcommerce_serverMatch2000sp2
ORmicrosoftcommerce_serverMatch2002
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.5 High
AI Score
Confidence
Low
0.065 Low
EPSS
Percentile
93.8%
Related for CVE-2002-0623