CVE-2003-0225
Medium
Description
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
SeverityMedium
CVSS5.0
Exploit probability99. percentile38.5%
Product
Microsoft Internet Information Server
PublishedJun 9, 2003
First seenJun 9, 2003
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft internet_information_server | 4.0 | — |
| microsoft internet_information_services | 5.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.