Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability

Bugtraq ID:	7469
Class:	Boundary Condition Error
CVE:	CVE-2003-0117
Remote:	Yes
Local:	No
Published:	Apr 30 2003 12:00AM
Updated:	Jul 11 2009 09:07PM
Credit:	Discovery credited to Cesar Cerrudo.
Vulnerable:	Microsoft BizTalk Server 2002 Enterprise Edition - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows XP Professional Microsoft BizTalk Server 2002 Developer Edition - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server
Not Vulnerable:

Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability

The following proof of concept was provided:

POST /Site/biztalkhttpreceive.dll?XXXX...(more than 250 chars) HTTP/1.0

Microsoft BizTalk Server 2002 HTTP Receiver Buffer Overflow Vulnerability

References:

• Microsoft Biztalk Server ISAPI HTTP Receive function buffer overflow (Cesar )
  
• Microsoft Security Bulletin MS03-016 (Microsoft)