VULHUB ™

Microsoft Commerce Server 2000 is a web server geared towards building e-commerce websites. It uses Microsoft Internet Information Server to provide basic web server functionality, but also includes additional features and functions. The AuthFilter ISAPI filter used by Commerce Server 2000 to support user authentication contains an unchecked buffer. Providing AuthFilter with malformed data could lead to either failure of the Commerce Server, or to arbitrary code execution. The Commerce Server process runs with LocalSystem privileges.

Microsoft Commerce Server 2000 is a web server geared towards building e-commerce websites. It uses Microsoft Internet Information Server to provide basic web server functionality, but also includes additional features and functions. The AuthFilter ISAPI filter used by Commerce Server 2000 to support user authentication contains an unchecked buffer. Providing AuthFilter with malformed data could lead to either failure of the Commerce Server, or to arbitrary code execution. The Commerce Server process runs with LocalSystem privileges.