Description
Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
References
- iis-asp-data-transfer-bo(8796) vdb-entry
- 4490 vdb-entry
- oval:org.mitre.oval:def:72 vdb-entry signature
- MS02-018 vendor-advisory
- 3301 vdb-entry
- VU#669779 third-party-advisory
- oval:org.mitre.oval:def:22 vdb-entry signature
- CA-2002-09 third-party-advisory
- 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018 vendor-advisory