Описание
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
Ссылки
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:site_server:3.0:*:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:apha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp1:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp1_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp2:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp2_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp3:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp3_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp4:i386:*:*:*:*:*
cpe:2.3:a:microsoft:site_server:3.0:sp4_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp1_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp2_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp3_alpha:*:*:*:*:*:*
cpe:2.3:a:microsoft:site_server_commerce:3.0:sp4_alpha:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.14972
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
EPSS
Процентиль: 94%
0.14972
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other