Vulnerability in Microsoft Internet Information Services

CVE-2001-1186

Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.

EPSS: 0.262 (97.8th percentile) — read the EPSS interpretation.

Affected products

References