CVE-2004-0205

CVE-2004-0205 describes a buffer overflow vulnerability in Microsoft Internet Information Server (IIS) 4.0, impacting various Avaya and Microsoft products that utilize this server. This flaw allows local users to execute arbitrary code through the redirect function. With a CVSS score of 7.2, it presents a high severity risk due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage has been identified, the potential for local code execution remains a concern.