PT-2002-1434 · Microsoft · Internet Explorer+2

Published 2002-06-15 · Updated 2021-07-23 · CVE-2002-0371

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.1 through 6.0 Microsoft Proxy Server version 2.0 Microsoft ISA Server version 2000

Description A buffer overflow issue exists in the gopher client, allowing remote attackers to execute arbitrary code via a gopher:// URL. This URL redirects the user to a real or simulated gopher server that sends a long response.

Recommendations For Microsoft Internet Explorer versions 5.1 through 6.0, apply the necessary patch to fix the buffer overflow issue in the gopher client. For Microsoft Proxy Server version 2.0, restrict access to gopher:// URLs to minimize the risk of exploitation. For Microsoft ISA Server version 2000, consider disabling the gopher client functionality until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-0371

Affected Products

Isa Server

Internet Explorer

Proxy Server

References · 11

• 🔥 https://exploit-db.com/exploits/21510 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0371 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027 · Vendor Advisory
• http://securityfocus.com/bid/4930 · Note
• http://kb.cert.org/vuls/id/440275 · Note
• http://marc.info/?l=bugtraq&m=102397955217618&w=2 · Note
• http://pivx.com/workaround_fail.html · Note
• http://iss.net/security_center/static/9247.php · Note
• http://online.securityfocus.com/archive/1/276848 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98 · Note
• http://marc.info/?l=bugtraq&m=102320516707940&w=2 · Note