PT-2003-1805 · Ibm+1 · Iss Server Sensor+1

Published 2003-09-03 · Updated 2017-07-11 · CVE-2003-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ISS Server Sensor versions 7.0 XPU 20.16 through 20.18

Description: The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code in Internet Information Server (IIS) via a certain URL through SSL.

Recommendations: For ISS Server Sensor version 7.0 XPU 20.16, update to version 20.19 or later to resolve the issue. For ISS Server Sensor version 7.0 XPU 20.18, update to version 20.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSL URL to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2003-0702

Affected Products

Iss Server Sensor

Internet Information Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-0702 · Security Note
• http://enteredge.com/research/CAN-2003-0702.asp · Note
• http://marc.info/?l=bugtraq&m=106278164225389&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13088 · Note