CVE-2002-0072

published 2002-04-22

CVE-2002-0072: The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the…

medium 5 CVSS 3.1

AV N AC L Au N C N I N A P

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	products_ms02-018	—	—
microsoft	internet_information_server	—	—
microsoft	internet_information_services	—	—