oval:org.mitre.oval:def:45

Definition Id: oval:org.mitre.oval:def:45

Oval ID:	oval:org.mitre.oval:def:45
Title:	DEPRECATED: Windows NT HTR ISAPI Buffer Overflow
Description:	Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-0071	Version:	3
Platform(s):	Microsoft Windows NT	Product(s):	Microsoft Internet Information Server (IIS)
Definition Synopsis:
Software section IIS 4.0 Major Version AND IIS minor version equals 0 AND NOT this is an NT Terminal Server AND the version of w3svc.dll is less than 4.2.775.1 AND NOT Patch Q319733 Installed AND NOT Patch Q327696 Installed AND NOT Patch Q811114 Installed AND Configuration section ism.dll mapping exists