CVE Vulnerabilities

CVE-2003-0225

Published: Jun 09, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.

Affected Software

Name Vendor Start Version End Version
Internet_information_server Microsoft 4.0 (including) 4.0 (including)
Internet_information_services Microsoft 5.0 (including) 5.0 (including)

References