ID CVE-2003-0822
Summary Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
References
Vulnerable Configurations
  • Microsoft frontpage_server_extensions 2000
    cpe:2.3:a:microsoft:frontpage_server_extensions:2000
  • Microsoft frontpage_server_extensions 2002
    cpe:2.3:a:microsoft:frontpage_server_extensions:2002
  • Microsoft Sharepoint Team Services 2002
    cpe:2.3:a:microsoft:sharepoint_team_services:2002
  • Microsoft Windows 2000 Advanced Server SP2
    cpe:2.3:o:microsoft:windows_2000:-:sp2:advanced_server
  • Microsoft Windows 2000 Datacenter Server SP2
    cpe:2.3:o:microsoft:windows_2000:-:sp2:datacenter_server
  • Microsoft Windows 2000 Professional SP2
    cpe:2.3:o:microsoft:windows_2000:-:sp2:professional
  • Microsoft Windows 2000 Server SP2
    cpe:2.3:o:microsoft:windows_2000:-:sp2:server
  • Microsoft Windows 2000 Advanced Server SP3
    cpe:2.3:o:microsoft:windows_2000:-:sp3:advanced_server
  • Microsoft Windows 2000 Datacenter Server SP3
    cpe:2.3:o:microsoft:windows_2000:-:sp3:datacenter_server
  • Microsoft Windows 2000 Professional SP3
    cpe:2.3:o:microsoft:windows_2000:-:sp3:professional
  • Microsoft Windows 2000 Server SP3
    cpe:2.3:o:microsoft:windows_2000:-:sp3:server
  • Microsoft Windows XP Professional Gold
    cpe:2.3:o:microsoft:windows_xp:-:gold:professional
  • cpe:2.3:o:microsoft:windows_xp:-:sp1:64-bit
    cpe:2.3:o:microsoft:windows_xp:-:sp1:64-bit
  • Microsoft Windows XP Service Pack 1 Home Edition
    cpe:2.3:o:microsoft:windows_xp:-:sp1:home
CVSS
Base: 7.5 (as of 01-01-2004 - 00:00)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
exploit-db via4
  • description Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow. CVE-2003-0822. Remote exploit for windows platform
    id EDB-ID:16356
    last seen 2016-02-01
    modified 2010-07-25
    published 2010-07-25
    reporter metasploit
    source https://www.exploit-db.com/download/16356/
    title Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
  • description MS Frontpage Server Extensions fp30reg.dll Exploit (MS03-051). CVE-2003-0822. Remote exploit for windows platform
    id EDB-ID:121
    last seen 2016-01-31
    modified 2003-11-13
    published 2003-11-13
    reporter Adik
    source https://www.exploit-db.com/download/121/
    title Microsoft Frontpage Server Extensions fp30reg.dll Exploit MS03-051
metasploit via4
description This is an exploit for the chunked encoding buffer overflow described in MS03-051 and originally reported by Brett Moore. This particular modules works against versions of Windows 2000 between SP0 and SP3. Service Pack 4 fixes the issue.
id MSF:EXPLOIT/WINDOWS/ISAPI/MS03_051_FP30REG_CHUNKED
last seen 2019-03-09
modified 2017-07-24
published 2010-07-25
reliability Good
reporter Rapid7
source https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb
title MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow
nessus via4
NASL family Web Servers
NASL id FRONTPAGE_CHUNKED_OVERFLOW.NASL
description The remote Microsoft FrontPage server seems vulnerable to a remote buffer overflow. Exploitation of this bug could give an unauthorized user access to the machine. The following systems are known to be vulnerable: Microsoft Windows 2000 Service Pack 2, Service Pack 3 Microsoft Windows XP, Microsoft Windows XP Service Pack 1 Microsoft Office XP, Microsoft Office XP Service Release 1.
last seen 2019-02-21
modified 2018-11-15
plugin id 11923
published 2003-11-12
reporter Tenable
source https://www.tenable.com/plugins/index.php?view=single&id=11923
title Microsoft FrontPage Server Extensions (fp30reg.dll) Debug Function Remote Overflow (MS03-051 / 813360)
oval via4
  • accepted 2011-05-16T04:02:50.513-04:00
    class vulnerability
    contributors
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Shane Shaffer
      organization G2, Inc.
    • name Sudhir Gandhe
      organization Telos
    • name Shane Shaffer
      organization G2, Inc.
    description Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
    family windows
    id oval:org.mitre.oval:def:364
    status accepted
    submitted 2003-12-09T12:00:00.000-04:00
    title MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 1)
    version 13
  • accepted 2011-05-16T04:02:50.905-04:00
    class vulnerability
    contributors
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Jonathan Baker
      organization The MITRE Corporation
    • name Shane Shaffer
      organization G2, Inc.
    • name Sudhir Gandhe
      organization Telos
    • name Shane Shaffer
      organization G2, Inc.
    definition_extensions
    comment Microsoft Windows NT is installed
    oval oval:org.mitre.oval:def:36
    description Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
    family windows
    id oval:org.mitre.oval:def:366
    status accepted
    submitted 2003-12-09T12:00:00.000-04:00
    title MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 2)
    version 26
  • accepted 2011-05-16T04:02:51.402-04:00
    class vulnerability
    contributors
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Shane Shaffer
      organization G2, Inc.
    • name Sudhir Gandhe
      organization Telos
    • name Shane Shaffer
      organization G2, Inc.
    description Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
    family windows
    id oval:org.mitre.oval:def:367
    status accepted
    submitted 2003-12-09T12:00:00.000-04:00
    title MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 3)
    version 13
  • accepted 2008-03-24T04:00:50.398-04:00
    class vulnerability
    contributors
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Jonathan Baker
      organization The MITRE Corporation
    • name Jonathan Baker
      organization The MITRE Corporation
    definition_extensions
    comment Microsoft Windows NT is installed
    oval oval:org.mitre.oval:def:36
    description Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
    family windows
    id oval:org.mitre.oval:def:699
    status accepted
    submitted 2003-03-04T12:00:00.000-04:00
    title MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 4)
    version 21
  • accepted 2011-05-16T04:03:25.346-04:00
    class vulnerability
    contributors
    • name Tiffany Bergeron
      organization The MITRE Corporation
    • name Andrew Buttner
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Christine Walzer
      organization The MITRE Corporation
    • name Anna Min
      organization BigFix, Inc
    • name Sudhir Gandhe
      organization Telos
    • name Shane Shaffer
      organization G2, Inc.
    description Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
    family windows
    id oval:org.mitre.oval:def:743
    status accepted
    submitted 2003-03-04T12:00:00.000-04:00
    title MS FrontPage Server Extensions Chunked Encoded Request Buffer Overflow (Test 5)
    version 12
packetstorm via4
refmap via4
bugtraq 20031112 Frontpage Extensions Remote Command Execution
cert-vn VU#279156
ms MS03-051
ntbugtraq 20031112 Frontpage Extensions Remote Command Execution
secunia 10195
xf fpse-debug-bo(13674)
saint via4
bid 9007
description FrontPage fp30reg.dll remote debug buffer overflow
id web_cms_fp_remotedebug
osvdb 2952
title frontpage_remote_debug
type remote
Last major update 17-10-2016 - 22:37
Published 15-12-2003 - 00:00
Last modified 12-10-2018 - 17:33
Back to Top