Description
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
exploit/windows/isapi/ms03_051_fp30reg_chunked
Exploit-DB 2
- Microsoft IIS - ISAPI FrontPage 'fp30reg.dll' Chunked Overflow (MS03-051) (Metasploit) EDB-16356 · remote · Jul 25, 2010 · verified
- Microsoft FrontPage Server Extensions - 'fp30reg.dll' (MS03-051) EDB-121 · remote · Nov 13, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- MS03-051 vendor-advisory
- oval:org.mitre.oval:def:364 vdb-entry signature
- 20031112 Frontpage Extensions Remote Command Execution mailing-list
- 20031112 Frontpage Extensions Remote Command Execution mailing-list
- fpse-debug-bo(13674) vdb-entry
- VU#279156 third-party-advisory
- oval:org.mitre.oval:def:699 vdb-entry signature
- 10195 third-party-advisory
- oval:org.mitre.oval:def:367 vdb-entry signature
- oval:org.mitre.oval:def:366 vdb-entry signature
- oval:org.mitre.oval:def:743 vdb-entry signature