PT-2003-2287 · Microsoft+1 · Iis+1

Publicado 2003-12-31 · Atualizado 2020-11-23 · CVE-2003-1342

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro Virus Control System (TVCS) version 1.8

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, in IIS by making multiple URL requests for ActiveSupport.exe.

Recommendations For TVCS version 1.8, consider restricting access to the ActiveSupport.exe executable to minimize the risk of exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2003-1342

Produtos afetados

Iis

Trend Micro Virus Control System

Referências · 9

• 🔥 https://exploit-db.com/exploits/22172 · Exploit
• http://securityfocus.com/bid/6617 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html · Nota
• http://osvdb.org/6185 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11060 · Nota
• http://secunia.com/advisories/7881 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1342 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1342 · Nota de Segurança