CVE-2002-1908: Medium severity Microsoft Internet Information Services vulnerability

Published Dec 31, 2002

Updated

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.

Affected Software

1 affected component

Microsoft Internet Information Services=5.0

Remediation

Patch Available

http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Jun 28, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1908?

CVE-2002-1908 is classified as a denial of service vulnerability that can lead to increased CPU consumption on the server.

How do I fix CVE-2002-1908?

To mitigate CVE-2002-1908, consider upgrading to a newer version of Microsoft IIS that does not have this vulnerability.

What software is affected by CVE-2002-1908?

CVE-2002-1908 specifically affects Microsoft Internet Information Services version 5.0 and 5.1.

Can CVE-2002-1908 be exploited remotely?

Yes, CVE-2002-1908 can be exploited remotely through specially crafted HTTP requests.

What are the potential impacts of CVE-2002-1908?

Exploitation of CVE-2002-1908 can lead to server denial of service, causing unresponsive services and degradation of performance.