PT-2003-1805 · Ibm+1 · Iss Server Sensor+1

Publicado 2003-09-03 · Atualizado 2017-07-11 · CVE-2003-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ISS Server Sensor versions 7.0 XPU 20.16 through 20.18

Description: The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL.

Recommendations: For ISS Server Sensor version 7.0 XPU 20.16, update to version 20.19 or later to resolve the issue. For ISS Server Sensor version 7.0 XPU 20.18, update to version 20.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSL URL to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-0702

Produtos afetados

Iss Server Sensor

Internet Information Server

Referências · 4

• http://enteredge.com/research/CAN-2003-0702.asp · Nota
• http://marc.info/?l=bugtraq&m=106278164225389&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13088 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0702 · Nota de Segurança