Vulnerability in Microsoft Internet Information Services
CVE-2005-2089
Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
Vulnerability class: HTTP Request Smuggling
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.310 (98.2th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.310 · newest: 0.310 · change: 0.000
Affected products
- Microsoft Internet Information Services — versions 5.0, 6.0
Weakness classification (CWE)
References
- exchange.xforce.ibmcloud.com/vulnerabilities/42899 (VDB Entry, Third Party Advisory, vdb-entry)
- www.securiteam.com/securityreviews/5GP0220G0U.html (Broken Link)
- www.watchfire.com/resources/HTTP-Request-Smuggling.pdf (Broken Link)
- seclists.org/lists/bugtraq/2005/Jun/0025.html (mailing-list, Mailing List, Third Party Advisory)