Description
IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned.
References
- N-011 third-party-advisory government-resource
- 6068 vdb-entry
- MS02-062 vendor-advisory
- 4846 vdb-entry
- oval:org.mitre.oval:def:1009 vdb-entry signature
- oval:org.mitre.oval:def:1011 vdb-entry signature
- iis-webdav-memory-allocation-dos(10503) vdb-entry
- 20021031 Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002) mailing-list
- http://www.nextgenss.com/vna/ms-iisdos.txt
- http://www.nextgenss.com/advisories/ms-iisdos.txt
- iis-resource-utilization-dos(10184) vdb-entry
- 6070 vdb-entry