PT-2002-1671 · Microsoft · Commerce Server

Publicado 2002-07-03 · Atualizado 2018-10-12 · CVE-2002-0623

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Commerce Server versions 2000 through 2002

Description A buffer overflow issue exists in the AuthFilter ISAPI filter, allowing remote attackers to execute arbitrary code via long authentication data.

Recommendations For Microsoft Commerce Server versions 2000 through 2002, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0623

Produtos afetados

Commerce Server

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0623 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0623 · Nota de Segurança
• http://iss.net/security_center/static/9426.php · Nota
• http://osvdb.org/5163 · Nota
• http://securityfocus.com/bid/5112 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033 · Aviso do Fabricante