Buffer Overflow in Microsoft IIS 4.0 and 5.0 Web Servers

CVE-2002-0364

Summary

A buffer overflow vulnerability exists in the chunked encoding transfer mechanism in Microsoft Internet Information Services (IIS) versions 4.0 and 5.0. This flaw allows attackers to execute arbitrary code by exploiting HTR request sessions. Successful exploitation could lead to a complete compromise of the web server's integrity, offering unauthorized access to sensitive data and control over server operations. It is crucial for organizations using these IIS versions to apply relevant patches and mitigations to safeguard their systems.

References