Vulnerability Note VU#279156
Microsoft FrontPage Server Extensions contains buffer overflow in remote debugging functionality
Microsoft FrontPage Server Extensions contains a vulnerability that allows remote attackers to execute arbitrary code with local system privileges.
Microsoft FrontPage Server Extensions (FPSE) is an optional set of tools that adds functionality to a web site. This functionality includes remote server administration, content updates, and a variety of site-specific tools such as searching support and form handling. According to MS03-051, FPSE is installed by default on Internet Information Server (IIS) 4.0, 5.0, and 5.1.
The FPSE contains a buffer overflow vulnerability in its support of remote debugging. This vulnerability can be exploited by an unauthenticated remote attacker and allows arbitrary code to be executed with local system privileges.
This vulnerability allows unauthenticated remote attackers to execute arbitrary code with local system privileges.
Apply a patch from Microsoft
Disable FrontPage Server Extensions
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||12 Nov 2003||12 Nov 2003|
CVSS Metrics (Learn More)
This vulnerability was reported to Microsoft by Brett More of Security-Assessment.com.
This document was written by Jeffrey P. Lanza and is based upon information provided by Microsoft.
- CVE IDs: CAN-2003-0822
- Date Public: 11 Nov 2003
- Date First Published: 12 Nov 2003
- Date Last Updated: 14 Nov 2003
- Severity Metric: 52.31
- Document Revision: 18
If you have feedback, comments, or additional information about this vulnerability, please send us email.