CVE-2000-1147 Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
MediumCVSS 4.6
EPSS 7.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet information server | = 4.0 | No fix listed |
References
- 20001103 IIS ASP $19.95 hack - IISHack 1.5 exploit mailing-list patch vendor-advisory
- 1911 exploit patch vdb-entry vendor-advisory
- iis-isapi-asp-bo(5510) vdb-entry