CVE-2003-0225 Information
Share on:
Feb 14, 2021
cve
Description
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
Reference
http://marc.info/?l=ntbugtraq&m=105110606122772&w=2 http://www.aqtronix.com/Advisories/AQ-2003-01.txt https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-018 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A373