CVE-2002-0071

CVE-2002-0071 describes a buffer overflow vulnerability in the ism.dll ISAPI extension, which handles HTR scripting in Microsoft Internet Information Server (IIS) versions 4.0 and 5.0. This flaw allows an unauthenticated attacker to trigger a denial of service or execute arbitrary code by sending crafted HTR requests containing excessively long variable names. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. Despite its high risk score and EPSS percentile, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on the CISA KEV catalog, indicating no evidence of active exploitation or significant community discussion.