{"id":"CVE-2003-0349","aliases":["EUVD-2003-0344","GHSA-vg7r-f2jg-5449"],"status":"published","title":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for...","description":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.80271,"percentile":0.99623,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2003-06-28T04:00:00Z","modified":"2026-06-16T22:02:02Z","exploits":[{"source":"exploitdb","id":"EDB-16355","title":"Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)","type":"remote","platform":"windows","date":"2010-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/16355"},{"source":"exploitdb","id":"EDB-22837","title":"Microsoft Windows NT 4.0/2000 - Media Services 'nsiislog.dll' Remote Buffer Overflow","type":"remote","platform":"windows","date":"2003-06-25","verified":true,"url":"https://www.exploit-db.com/exploits/22837"},{"source":"exploitdb","id":"EDB-48","title":"Microsoft Windows Media Services - Remote (MS03-022)","type":"remote","platform":"windows","date":"2003-07-01","verified":true,"url":"https://www.exploit-db.com/exploits/48"},{"source":"metasploit","id":"exploit/windows/isapi/ms03_022_nsiislog_post","title":"MS03-022 Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow","type":"exploit","platform":"Windows","date":"2003-06-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/isapi/ms03_022_nsiislog_post"}],"products":[{"vendor":"microsoft","product":"windows_2000"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=105665030925504\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/9115","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/113716","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36\u0026sid=1\u0026A2=ind0306\u0026L=NTBUGTRAQ\u0026P=R4563","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1007059","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0349"},{"url":"https://github.com/advisories/GHSA-vg7r-f2jg-5449"}],"sources":{"cve":[{"id":"CVE-2003-0349","description":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.","status":"published","published":"2003-06-28T04:00:00Z","modified":"2024-08-08T01:50:47.647Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-0344","description":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.","status":"published","published":"2003-06-28T04:00:00Z","modified":"2024-08-08T01:50:47Z","updated_at":"2026-11-03T01:15:07.680279Z"}],"ghsa":[{"id":"GHSA-vg7r-f2jg-5449","title":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for...","description":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.","status":"published","published":"2022-04-29T01:26:16Z","modified":"2023-01-30T05:01:07Z","updated_at":"2026-11-02T14:46:20.638842Z"}],"nvd":[{"id":"CVE-2003-0349","description":"Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.","status":"published","published":"2003-07-24T04:00:00Z","modified":"2026-06-16T22:02:02.713Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}]}}