Denial of Service Vulnerability in Microsoft Site Server 3.0
CVE-2002-2081

Currently unrated

Key Information:

Vendor
Microsoft
Status
Site Server
Site Server Commerce
Vendor
CVE Published:
31 December 2002

Summary

The vulnerability in Microsoft Site Server 3.0 arises from the cphost.dll component, which permits remote attackers to execute a denial of service attack. This is achieved by sending an HTTP POST request containing a file with an excessively long TargetURL parameter. As a result, the Site Server may terminate unexpectedly and leave the uploaded file in the c:\temp directory, leading to potential disk consumption issues that can disrupt the server's functionality.

References

http://www.securityfocus.com/bid/4002
vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/...
mailing-listx_refsource_VULNWATCH
http://www.iss.net/security_center/static/8053.php
vdb-entryx_refsource_XF

EPSS Score

19% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.