PT-2003-2287 · Microsoft+1 · Iis+1

Published 2003-12-31 · Updated 2020-11-23 · CVE-2003-1342

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Trend Micro Virus Control System (TVCS) version 1.8

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, in IIS by making multiple URL requests for ActiveSupport.exe.

Recommendations For TVCS version 1.8, consider restricting access to the ActiveSupport.exe executable to minimize the risk of exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2003-1342

Affected Products

Iis

Trend Micro Virus Control System

References · 9

• 🔥 https://exploit-db.com/exploits/22172 · Exploit
• http://secunia.com/advisories/7881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1342 · Security Note
• http://securityfocus.com/bid/6617 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html · Note
• http://osvdb.org/6185 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11060 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1342 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0020.html · Note