{"uuid": "38ecaa3a-1b50-4726-b1e5-228ad60708d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0874", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms02_018_htr.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"stinko \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploits a buffer overflow in the ISAPI ISM.DLL used to\\n          process HTR scripting in IIS 4.0. This module works against\\n          Windows NT 4 Service Packs 3, 4, and 5. The server will\\n          continue to process requests until the payload being\\n          executed has exited. If you've set EXITFUNC to 'seh', the\\n          server will continue processing requests, but you will have\\n          trouble terminating a bind shell. If you set EXITFUNC to\\n          thread, the server will crash upon exit of the bind shell.\\n          The payload is alpha-numerically encoded without a NOP sled\\n          because otherwise the data gets mangled by the filters.\", \"disclosure_date\": \"2002-04-10\", \"fullname\": \"exploit/windows/iis/ms02_018_htr\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS02-018 Microsoft IIS 4.0 .HTR Path Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/iis/ms02_018_htr.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/iis/ms02_018_htr\", \"references\": [\"CVE-1999-0874\", \"OSVDB-3325\", \"BID-307\", \"URL-http://www.eeye.com/html/research/advisories/AD19990608.html\", \"MSB-MS02-018\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows NT 4.0 SP3\", \"Windows NT 4.0 SP4\", \"Windows NT 4.0 SP5\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:03.026462Z"}