PT-2003-1379 · Microsoft · Biztalk Server

Cesar Cerrudo · Published 2003-05-02 · Updated 2018-10-12 · CVE-2003-0117

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft BizTalk Server 2002

Description A buffer overflow issue exists in the HTTP receiver function of Microsoft BizTalk Server, specifically in the BizTalkHTTPReceive.dll ISAPI component. This allows attackers to execute arbitrary code by sending a certain request to the HTTP receiver.

Recommendations For Microsoft BizTalk Server 2002, apply the necessary patch or update to fix the buffer overflow issue in the HTTP receiver function.

Exploit

Fix

Related Identifiers

CVE-2003-0117

Affected Products

Biztalk Server

References · 4

• 🔥 https://exploit-db.com/exploits/22553 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0117 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-016 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=105216866132289&w=2 · Note