• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Commerce Server 2000 Profile Service Buffer Overflow Vulnerability

Microsoft Commerce Server is a web server products for building, deploying, and analyzing e-commerce sites.

A buffer overflow vulnerability exists in the Profile Service of Commerce Server. The flaw resides in the code that handles certain types of API (Application Programming Interface) calls. Exploitation of this vulnerability may lead to a denial of service attack against Commerce Server or execution of arbitrary code in the Local System security context.