vulnwire
7.5high

CVE-2003-0349in critical feed3 exploits

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Window…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
80.3%
percentile 100%
Public exploits
3
Exploit-DB

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.

Exploit prediction (EPSS)

80.27% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-48 Microsoft Windows Media Services - Remote (MS03-022) · remote · 2003-07-01
  • EDB-22837 Microsoft Windows NT 4.0/2000 - Media Services 'nsiislog.dll' Remote Buffer Overflow · remote · 2003-06-25
  • EDB-16355 Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit) · remote · 2010-07-25

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • marc.info /?l=bugtraq&m=105665030925504&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/9115 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • kb.cert.org /vuls/id/113716 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2003/ms03-022 · vendor-advisory, x_refsource_MS, x_transferred
  • ntbugtraq.com /default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563 · mailing-list, x_refsource_NTBUGTRAQ, x_transferred
  • securitytracker.com /id?1007059 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.