Denial of Service Vulnerability in Microsoft Internet Information Server (IIS) 4.0 and 5.0

CVE-2003-0225

Summary

The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) versions 4.0 and 5.0 lacks proper controls on memory allocation for header construction. This flaw enables remote attackers to exploit the server by sending a specially crafted request that generates excessively large headers. The resulting memory consumption can lead to denial of service, as the server becomes unresponsive due to resource exhaustion. Implementing security measures and updates is crucial to mitigating this vulnerability and ensuring system stability.

References