oval:org.mitre.oval:def:137

Definition Id: oval:org.mitre.oval:def:137

Oval ID:	oval:org.mitre.oval:def:137
Title:	DEPRECATED: Windows NT IIS HTTP Header Field Buffer Overflow
Description:	Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2002-0150	Version:	3
Platform(s):	Microsoft Windows NT	Product(s):	Microsoft Internet Information Server (IIS)
Definition Synopsis:
Software section IIS 4.0 Major Version AND IIS minor version equals 0 AND NOT this is an NT Terminal Server AND the version of w3svc.dll is less than 4.2.775.1 AND NOT Patch Q319733 Installed AND NOT Patch Q327696 Installed AND NOT Patch Q811114 Installed AND Configuration section asp.dll mapping exists