PT-2002-1671 · Microsoft · Commerce Server

Published 2002-07-03 · Updated 2018-10-12 · CVE-2002-0623

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Commerce Server versions 2000 through 2002

Description A buffer overflow issue exists in the AuthFilter ISAPI filter, allowing remote attackers to execute arbitrary code via long authentication data.

Recommendations For Microsoft Commerce Server versions 2000 through 2002, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0623

Affected Products

Commerce Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0623 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0623 · Note
• http://iss.net/security_center/static/9426.php · Note
• http://osvdb.org/5163 · Note
• http://securityfocus.com/bid/5112 · Note