Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

The remote server is vulnerable to a buffer overflow in the .HTR filter.

An attacker may use this flaw to execute arbitrary code on this host (although the exploitation of this flaw is considered  difficult).

The remote version of Windows contains multiple flaws in the Internet Information Service (IIS), such as heap overflow, DoS, and XSS that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges.

The IIS server appears to have the .HTR ISAPI filter mapped.

At least one remote vulnerability has been discovered for the .HTR filter. This is detailed in Microsoft Advisory MS02-018, and gives remote SYSTEM level access to the web server. 

It is recommended that, even if you have patched this vulnerability, you unmap the .HTR extension and any other unused ISAPI extensions if they are not required for the operation of your site.

ID	Name	Product	Family	Severity
11028	Microsoft IIS .HTR Filter Multiple Overflows (MS02-028)	Nessus	Web Servers	high
10943	MS02-018: Cumulative Patch for Internet Information Services (327696)	Nessus	Windows : Microsoft Bulletins	critical
10932	Microsoft IIS .HTR ISAPI Filter Enabled	Nessus	Web Servers	high

Detections

Analytics

CVE-2002-0071

critical

Tenable Plugins

high

critical

high