Vulnerability in Microsoft Internet Information Services

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.

EPSS: 0.150 (96.4th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_information_services — versions 5.0
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)