Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS 4.0/5.0 .HTR ISAPI扩展映射远程堆溢出漏洞(MS02-018)
Vulnerability Description
Microsoft IIS(Internet Information Server)是MS Windows系统默认自带的Web服务器软件。 IIS 4.0/5.0对.htr文件的映射请求处理存在堆溢出漏洞，远程攻击者可以利用此漏洞得到主机本地普通用户访问权限。 默认安装的IIS提供对以.htr为后缀的文件请求的支持，一般来说 .htr 文件用来设置基于Web的口令，文件请求被映射到一个ISAPI扩展，ISM.DLL程序来处理。当请求被传递给ISM.DLL ISAPI过滤器来处理时，一个经过精心构造的特别的
CVSS Information
N/A
Vulnerability Type
N/A