high7.5Public exploit code
CVE-2003-0349
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (ns…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows NT 4.0/2000 - Media Services 'nsiislog.dll' Remote Buffer Overflow2003-06-25 · remote · windows · Verified
- Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)2010-07-25 · remote · windows · Verified
- Microsoft Windows Media Services - Remote (MS03-022)2003-07-01 · remote · windows · Verified
Impact
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105665030925504&w=2
- http://secunia.com/advisories/9115
- http://securitytracker.com/id?1007059
- http://www.kb.cert.org/vuls/id/113716
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938