Description
Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
References
- oval:org.mitre.oval:def:132 vdb-entry signature
- 3320 vdb-entry
- oval:org.mitre.oval:def:95 vdb-entry signature
- MS02-018 vendor-advisory
- VU#721963 third-party-advisory
- iis-ssi-safety-check-bo(8798) vdb-entry
- 4478 vdb-entry
- CA-2002-09 third-party-advisory
- 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018 vendor-advisory