Unscored severity · published Aug 6, 2004
CVE-2004-0205
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function
–
CVSS
24.5%
EPSS
No
On KEV
Description
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
Exploitation
Is it being used?
Exploit prediction (EPSS)24.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Definity One Media Server · Avaya
All versions, or not specified · source: NVD
II
Internet Information Server · Microsoft
4.0 · source: NVD
IM
Ip600 Media Servers · Avaya
All versions, or not specified · source: NVD
MM
Modular Messaging Message Storage Server · Avaya
s3400 · source: NVD
S8
S8100 · Avaya
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0205
secunia.com
http://secunia.com/advisories/12061
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-179.shtml
Patch
http://www.kb.cert.org/vuls/id/717748
www.osvdb.org
http://www.osvdb.org/7799
www.securityfocus.com
http://www.securityfocus.com/bid/10706
Patch
http://www.us-cert.gov/cas/techalerts/TA04-196A.html
More from Definity One Media Server
–
CVE-2007-2374
Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2007-1765
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a…
–
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements,…
–
CVE-2004-0841
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window,…
–
CVE-2004-0842
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain…