PT-2002-1434 · Microsoft · Internet Explorer+2

Publicado 2002-06-15 · Atualizado 2021-07-23 · CVE-2002-0371

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.1 through 6.0 Microsoft Proxy Server version 2.0 Microsoft ISA Server version 2000

Description A buffer overflow issue exists in the gopher client, allowing remote attackers to execute arbitrary code via a gopher:// URL. This URL redirects the user to a real or simulated gopher server that sends a long response.

Recommendations For Microsoft Internet Explorer versions 5.1 through 6.0, apply the necessary patch to fix the buffer overflow issue in the gopher client. For Microsoft Proxy Server version 2.0, restrict access to gopher:// URLs to minimize the risk of exploitation. For Microsoft ISA Server version 2000, consider disabling the gopher client functionality until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-0371

Produtos afetados

Isa Server

Internet Explorer

Proxy Server

Referências · 11

• 🔥 https://exploit-db.com/exploits/21510 · Exploit
• http://securityfocus.com/bid/4930 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0371 · Nota de Segurança
• http://kb.cert.org/vuls/id/440275 · Nota
• http://marc.info/?l=bugtraq&m=102397955217618&w=2 · Nota
• http://pivx.com/workaround_fail.html · Nota
• http://iss.net/security_center/static/9247.php · Nota
• http://online.securityfocus.com/archive/1/276848 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102320516707940&w=2 · Nota