CVEvulnerability
CVE-2003-0349
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-07-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Affected configurations
• microsoft windows 2000
References
- http://marc.info/?l=bugtraq&m=105665030925504&w=2 marc.info
- http://secunia.com/advisories/9115 secunia.com
- http://securitytracker.com/id?1007059 securitytracker.com
- http://www.kb.cert.org/vuls/id/113716 US Government Resource
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=105665030925504&w=2 marc.info
- http://secunia.com/advisories/9115 secunia.com
- http://securitytracker.com/id?1007059 securitytracker.com
- http://www.kb.cert.org/vuls/id/113716 US Government Resource
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 oval.cisecurity.org