Published: 24/07/2003 Updated: 12/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Windows 2000

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote malicious users to execute arbitrary code via a large POST request to nsiislog.dll.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows 2000

// Windows Media Services Remote Command Execution #2 // v 10 beta // (c) firew0rker //tN [The N0b0D1eS] #include <stdioh> #include <stringh> #include <stdlibh> #ifdef WIN32 #include <winsockh> #pragma comment(lib, "wsock32") #else #include <sys/socketh> #include <sys/typesh> #include <netinet/in ...

source: wwwsecurityfocuscom/bid/8035/info Microsoft has reported a buffer overflow vulnerability in Windows Media Services This is due to a problem with how the logging ISAPI extension handles incoming client requests This could cause arbitrary code execution in IIS, which is exploitable through Media Services // Windows Media Service ...

## # $Id: ms03_022_nsiislog_postrb 9929 2010-07-25 21:37:54Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

NVD-CWE-Other http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563 http://www.kb.cert.org/vuls/id/113716 http://securitytracker.com/id?1007059 http://secunia.com/advisories/9115 http://marc.info/?l=bugtraq&m=105665030925504&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022 https://nvd.nist.gov https://www.exploit-db.com/exploits/48/https://www.kb.cert.org/vuls/id/113716

CVE-2003-0349

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect