CVE-2003-0225: Medium severity Microsoft Internet Information Services vulnerability
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0225?
CVE-2003-0225 is considered a denial of service vulnerability due to its potential for causing significant memory consumption.
How do I fix CVE-2003-0225?
To mitigate CVE-2003-0225, consider upgrading to a newer version of Internet Information Services that does not have this vulnerability.
What systems are affected by CVE-2003-0225?
CVE-2003-0225 affects Microsoft Internet Information Services (IIS) versions 4.0 and 5.0.
What type of attack does CVE-2003-0225 facilitate?
CVE-2003-0225 facilitates denial of service attacks by allowing attackers to send oversized headers.
Can CVE-2003-0225 be exploited remotely?
Yes, CVE-2003-0225 can be exploited remotely by attackers who can send HTTP requests to the affected server.