| Package | Affected versions | Patched versions |
|---|---|---|
| site server | = 3.0 | |
| site server commerce | = 3.0 |
cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free