Description
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
MS02-018 Microsoft IIS 4.0 .HTR Path Overflow
exploit/windows/iis/ms02_018_htr
Exploit-DB 5
- Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit) EDB-16468 · remote · Apr 30, 2010 · verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (1) EDB-19245 · remote · Jun 15, 1999 · verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (2) EDB-19246 · remote · Jun 15, 1999 · verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (3) EDB-19247 · remote · Jun 15, 1999 · verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (4) EDB-19248 · remote · Jun 15, 1999 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- AD06081999 third-party-advisory
- oval:org.mitre.oval:def:915 vdb-entry signature
- MS99-019 vendor-advisory
- Q234905 vendor-advisory
- J-048 third-party-advisory government-resource