Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft IIS处理伪造的"Content-Length"失败导致拒绝服务漏洞
Vulnerability Description
Microsoft IIS 5.0是随Windows 2000系统一起发布的流行的Web服务器程序。 IIS 5.0对意外情况的HTTP请求处理存在问题，远程攻击者通过向IIS 5.0发送一个精心构造的请求，可能导致IIS 5.0拒绝服务。 当IIS 5.0接到一个包含伪造的"Content-Length"域的GET请求时，会以一种异常的方式处理该请求，即IIS 5.0保持该连接并且不超时，但是不再响应其它请求。如果攻击者发送大量的上述畸形请求，就可能使IIS无法响应正常的连接请求，有可能造成拒绝服务攻击
CVSS Information
N/A
Vulnerability Type
N/A