CVE-2003-0227
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 34%
from disclosure to weapon45 days
Published on NVDMay 30
1st PoC+45d
exploitation probability
34%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/56⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=105427615626177&w=2http://marc.info/?l=ntbugtraq&m=105421127531558&w=2http://marc.info/?l=ntbugtraq&m=105421176432011&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966