Description
Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/466331/100/200/threaded ↗
- http://www.osvdb.org/34006 ↗
- http://www.vupen.com/english/advisories/2007/1322 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2001 ↗
- http://www.securitytracker.com/id?1017894 ↗
- http://www.kb.cert.org/vuls/id/434137 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32736 ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-018 ↗
- http://www.securityfocus.com/bid/22861 ↗
- http://secunia.com/advisories/24819 ↗