VulnerabilityModified
CVE-2002-0150
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
HIGH 7.5EPSS 49.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 49.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 49.48% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/internet information server · microsoft/internet information services
- Source
- cve@mitre.org
References
- http://www.cert.org/advisories/CA-2002-09.htmlUS Government Resource
- http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
- http://www.iss.net/security_center/static/8797.php
- http://www.kb.cert.org/vuls/id/454091US Government Resource
- http://www.osvdb.org/3316
- http://www.securityfocus.com/bid/4476
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39
- http://www.cert.org/advisories/CA-2002-09.htmlUS Government Resource
- http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
- http://www.iss.net/security_center/static/8797.php
- http://www.kb.cert.org/vuls/id/454091US Government Resource
- http://www.osvdb.org/3316
- http://www.securityfocus.com/bid/4476
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.