Detections
Analytics
Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Remote Overflow (MS03-051 / 813360)
high Nessus Plugin ID 11923
Language:
Synopsis
It is possible to execute code on the remote host through FrontPage.Description
The remote Microsoft FrontPage server seems vulnerable to a remote buffer overflow. Exploitation of this bug could give an unauthorized user access to the machine.The following systems are known to be vulnerable:
Microsoft Windows 2000 Service Pack 2, Service Pack 3 Microsoft Windows XP, Microsoft Windows XP Service Pack 1 Microsoft Office XP, Microsoft Office XP Service Release 1.
Solution
Apply patch MS03-051.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2003/ms03-051
Plugin Details
Severity: High
ID: 11923
File Name: frontpage_chunked_overflow.nasl
Version: 1.37
Type: remote
Family: Web Servers
Published: 11/12/2003
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 11/11/2003
Exploitable With
CANVAS (CANVAS)
Metasploit (MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow)
Reference Information
CVE: CVE-2003-0822, CVE-2003-0824
MSFT: MS03-051
MSKB: 813360