CVE-2002-0623

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka "New Variant of the ISAPI Filter Buffer Overrun".

Published: Jul 3, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0623
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / commerce_server	2000-sp1	2000-sp1.x
microsoft / commerce_server	2002	2002.x
microsoft / commerce_server	2000	2000.x
microsoft / commerce_server	2000-sp2	2000-sp2.x

http://www.iss.net/security_center/static/9426.php
http://www.osvdb.org/5163
http://www.securityfocus.com/bid/5112
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Vulnerability Database

289,599

CVE-2002-0623