CVE-2002-0364: Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute a...

Security readout for executives and security teams

CVE-2002-0364 is an old but severe IIS web-server flaw. A vulnerable IIS 4.0 or 5.0 server could be compromised through malformed chunked transfer processing involving HTR requests, potentially letting an attacker run code on the server. Exposure is most likely on legacy Microsoft IIS 4.0 or 5.0 systems, especially internet-facing servers that still process HTR requests. Modern systems are not identified as affected in the bundle. Treat confirmed exposure as urgent remediation or retirement work. The business risk is full compromise of obsolete web infrastructure, but urgency depends on whether IIS 4.0 or 5.0 still exists in the environment. Mitigation focus: Review Microsoft MS02-028 for vendor-approved fixes or configuration guidance.; Retire or isolate any remaining IIS 4.0 or 5.0 servers.; Restrict external access to affected web servers until remediated..

Prepared

Jun 30, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.