Microsoft Internet Information Services 5.0 - Denial of Service via Oversized Content-Length Header
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.