CVE-2002-2081

CVE-2002-2081 describes a denial-of-service vulnerability in cphost.dll within Microsoft Site Server 3.0 and Site Server Commerce. An unauthenticated remote attacker can exploit this by sending an HTTP POST request with a long TargetURL parameter, causing the server to abort and leave large files in the c:\temp directory, leading to disk exhaustion. The vulnerability has a CVSS v2 score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, resulting in a partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this older vulnerability.