PT-2003-1379 · Microsoft · Biztalk Server

Cesar Cerrudo · Publicado 2003-05-02 · Atualizado 2018-10-12 · CVE-2003-0117

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft BizTalk Server 2002

Description A buffer overflow issue exists in the HTTP receiver function of Microsoft BizTalk Server, specifically in the BizTalkHTTPReceive.dll ISAPI component. This allows attackers to execute arbitrary code by sending a certain request to the HTTP receiver.

Recommendations For Microsoft BizTalk Server 2002, apply the necessary patch or update to fix the buffer overflow issue in the HTTP receiver function.

Exploit

Correção

Identificadores relacionados

CVE-2003-0117

Produtos afetados

Biztalk Server

Referências · 4

• 🔥 https://exploit-db.com/exploits/22553 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0117 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-016 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=105216866132289&w=2 · Nota