CVE-2004-0205 : Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local

Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.

Published 2004-08-06 04:00:00

Updated 2018-10-12 21:34:13

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2004-0205

Microsoft » Internet Information Server » Version: 4.0
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
Matching versions
Avaya » Modular Messaging Message Storage Server » Version: S3400
cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*
Matching versions
Avaya » Ip600 Media Servers
cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*
Matching versions
Avaya » Definity One Media Server
cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*
Matching versions
Avaya » S8100
cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*
Matching versions

Top countries where our scanners detected CVE-2004-0205

Top open port discovered on systems with this issue 80

IPs affected by CVE-2004-0205 24

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2004-0205!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

EPSS FAQ

0.67%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 70 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Jump to