PT-2001-2321 · Microsoft · Iis

Published 2001-12-11 · Updated 2018-10-30 · CVE-2001-1186

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS version 5.0

Description The issue allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents the server from timing out the connection.

Recommendations For Microsoft IIS version 5.0, consider restricting access to the server or implementing connection timeout limits to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1186

Affected Products

Iis

References · 8

• 🔥 http://securityfocus.com/bid/3667 · Exploit
• 🔥 https://exploit-db.com/exploits/21177 · Exploit
• 🔥 http://securityfocus.com/archive/1/244892 · Exploit
• http://iss.net/security_center/static/7691.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1186 · Security Note
• http://online.securityfocus.com/archive/1/245100 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1186 · Note
• http://online.securityfocus.com/archive/1/244931 · Note