Description
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
References
- 3316 vdb-entry
- iis-asp-http-header-bo(8797) vdb-entry
- oval:org.mitre.oval:def:137 vdb-entry signature
- MS02-018 vendor-advisory
- VU#454091 third-party-advisory
- 4476 vdb-entry
- CA-2002-09 third-party-advisory
- oval:org.mitre.oval:def:39 vdb-entry signature
- 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018 vendor-advisory