CVE-2002-2081

Currently unrated

Key Information:

Vendor
Microsoft
Status
Site Server
Site Server Commerce
Vendor
CVE Published:
31 December 2002

Summary

cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.

References

http://www.securityfocus.com/bid/4002
vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/...
mailing-listx_refsource_VULNWATCH
http://www.iss.net/security_center/static/8053.php
vdb-entryx_refsource_XF

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.