CVE-2002-2081

cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:site_server:3.0:*:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:apha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp1:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp1_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp2:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp2_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp3:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp3_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp4:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp4_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp1_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp2_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp3_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp4_alpha:*:*:*:*:*:*

History

20 Nov 2024, 23:42

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html - () http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html -
References () http://www.iss.net/security_center/static/8053.php - () http://www.iss.net/security_center/static/8053.php -
References () http://www.securityfocus.com/bid/4002 - () http://www.securityfocus.com/bid/4002 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:42


NVD link : CVE-2002-2081

Mitre link : CVE-2002-2081

CVE.ORG link : CVE-2002-2081


JSON object : View

Products Affected

microsoft

  • site_server
  • site_server_commerce