PT-2001-2321 · Microsoft · Iis

Publicado 2001-12-11 · Atualizado 2018-10-30 · CVE-2001-1186

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS version 5.0

Description The issue allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents the server from timing out the connection.

Recommendations For Microsoft IIS version 5.0, consider restricting access to the server or implementing connection timeout limits to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1186

Produtos afetados

Iis

Referências · 8

• 🔥 http://securityfocus.com/bid/3667 · Exploit
• 🔥 https://exploit-db.com/exploits/21177 · Exploit
• 🔥 http://securityfocus.com/archive/1/244892 · Exploit
• http://online.securityfocus.com/archive/1/245100 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1186 · Nota
• http://iss.net/security_center/static/7691.php · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/244931 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1186 · Nota de Segurança