CVE-2003-0224
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft IIS 5.0(Internet Infomation Server 5)是Microsoft Windows 2000自带的一个网络信息服务器。IIS支持SSI(Server Side Include)功能。ssinc.dll就是一个SSI解释器。默认情况下，扩展名 .stm、.shtm 和 .shtml 被映射到解释程序(ssinc.dll)。 IIS 4.0/5.0所带的一个动态链接库(ssinc.dll)在处理包含文件时存在一个缓冲区溢出漏洞，本地攻击者可能利用这个漏洞获取Lo
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0224
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft IIS ssinc.dll长文件名缓冲区溢出漏洞(MS03-018)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft IIS 5.0(Internet Infomation Server 5)是Microsoft Windows 2000自带的一个网络信息服务器。IIS支持SSI(Server Side Include)功能。ssinc.dll就是一个SSI解释器。默认情况下，扩展名 .stm、.shtm 和 .shtml 被映射到解释程序(ssinc.dll)。 IIS 4.0/5.0所带的一个动态链接库(ssinc.dll)在处理包含文件时存在一个缓冲区溢出漏洞，本地攻击者可能利用这个漏洞获取Lo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0224
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0224
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0224 (2)
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018 vendor-advisory x_refsource_MS
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A483 vdb-entry signature x_refsource_OVAL
Mailing List Discussions for CVE-2003-0224 (1)
Same Patch Batch · n/a · 2003-05-30 · 17 CVEs total
| CVE-2002-1564 | Microsoft Internet Explorer安全漏洞 | |
| CVE-2003-0189 | Apache 安全漏洞 | |
| CVE-2003-0223 | Microsoft Internet Information Services 安全漏洞 | |
| CVE-2003-0225 | Microsoft IIS ASP头远程拒绝服务攻击漏洞(MS03-018) | |
| CVE-2003-0226 | Microsoft Internet Information Services 安全漏洞 | |
| CVE-2003-0227 | Microsoft Windows Media Services 缓冲区错误漏洞 | |
| CVE-2003-0240 | Axis Network Camera管理访问验证绕过漏洞 | |
| CVE-2003-0241 | FrontRange Solutions GoldMine HTML邮件脚本执行漏洞 | |
| CVE-2003-0245 | Apache 安全漏洞 | |
| CVE-2003-0355 | Safari 1.0 Beta 2 (v73)证书受到威胁 | |
| CVE-2003-0356 | Ethereal多个解析器单字节缓冲区溢出漏洞 | |
| CVE-2003-0357 | Ethereal mount解析器整数溢出造成缓冲区破坏漏洞 | |
| CVE-2003-0358 | Nethack本地缓冲区溢出漏洞 | |
| CVE-2003-0360 | gPS 缓冲区溢出漏洞 | |
| CVE-2003-0361 | gPS rgpsp.conf 连接源漏洞 | |
| CVE-2003-0362 | gPS缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2003-0224
No comments yet