CVE-2002-0072

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server IIS 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service crash when the URL parser accesses a nu...

CVE-2002-0072

CVE-2002-0072 describes a denial-of-service in Microsoft IIS 4.0/5.0/5.1 caused by the w3svc.dll FP2002/ISAPI filter when handling an overly long URL. The error handling rewrites a URL to a null value and then dereferences it, crashing Inetinfo.exe. Affected components: FP2002 Front Page Server E...

frontpage.DoS.txt

Date: Sat, 17 Apr 1999 09:55:58 -0700 PDT From: Spb Telecom To: [email protected] Subject: Front Page Server BUG discovered by Zo0mer I have discovered 1 month ago a bug in Front Page 98 Server. I enter my local host adress http://zo0mer//////////////////////////////////////////and...

Security Update for Windows Server 2003 for Itanium-based Systems (KB908981)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Windows Front Page Server Extensions and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may...