medium4.6Public exploit code
CVE-2000-1147
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0 - ISAPI Buffer Overflow2000-11-06 · local · windows · Verified
Impact
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/143070
- http://www.securityfocus.com/bid/1911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5510
- http://www.securityfocus.com/archive/1/143070
- http://www.securityfocus.com/bid/1911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5510