CVE-2003-0349

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 80%

from disclosure to weapon0 days

Published on NVDJun 28

1st PoCJun 25

metasploitJun 25

exploitation probability

80%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/16355unverified exploitdbwww.exploit-db.com/exploits/48unverified exploitdbwww.exploit-db.com/exploits/22837unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=105665030925504&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022 http://secunia.com/advisories/9115 http://securitytracker.com/id?1007059 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 http://www.kb.cert.org/vuls/id/113716 http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563