Buffer Overflow Vulnerability in Microsoft IIS Versions 4.0, 5.0, and 5.1

CVE-2002-0149

Summary

A buffer overflow in the ASP Server-Side Include Function of Microsoft IIS versions 4.0, 5.0, and 5.1 enables remote attackers to initiate a denial of service attack and potentially execute arbitrary code by leveraging long file names. This vulnerability poses a significant risk to the security of web applications hosted on affected versions, as it can be exploited remotely without the need for authentication or user interaction.

References