Vulnerability in N/a
CVE-2003-0718
The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing…
EPSS: 0.820 (99.2th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- oval:org.mitre.oval:def:4767 (signature, x_refsource_OVAL, vdb-entry)
- iis-webdav-xml-attribute-dos(17645) (vdb-entry, x_refsource_XF)
- iis-ms04030-patch(17656) (vdb-entry, x_refsource_XF)
- oval:org.mitre.oval:def:1330 (signature, x_refsource_OVAL, vdb-entry)
- MS04-030 (x_refsource_MS, vendor-advisory)
- 20041012 Microsoft IIS 5.x/6.0 WebDAV (XML parser) attribute blowup DoS (mailing-list, x_refsource_BUGTRAQ)
- oval:org.mitre.oval:def:1427 (signature, x_refsource_OVAL, vdb-entry)