PT-2003-1446 · Microsoft · Windows 2000+3

Brett Moore · Publicado 2003-05-30 · Atualizado 2020-11-13 · CVE-2003-0227

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Services versions prior to the fixed version in Windows NT 4.0 and 2000

Description: The issue concerns the logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services. It allows remote attackers to cause a denial of service in Internet Information Server (IIS) and potentially execute arbitrary code via a certain network request.

Recommendations: For Microsoft Windows Media Services in Windows NT 4.0 and 2000, apply the necessary patch or update to fix the issue in the nsiislog.dll ISAPI extension. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2003-0227

Produtos afetados

Internet Information Server

Windows 2000

Windows Media Services

Windows Nt 4.0

Referências · 8

• 🔥 https://exploit-db.com/exploits/56 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936 · Nota
• http://marc.info/?l=ntbugtraq&m=105421176432011&w=2 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=105427615626177&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0227 · Nota de Segurança
• http://marc.info/?l=ntbugtraq&m=105421127531558&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966 · Nota