CVE-2003-0226
Microsoft Internet Information Services 5.0-5.1 - Denial of Service via Long WebDAV PROPFIND or SEARCH Request
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2003-0226. PoCs published by Shachank, Neo1.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in Microsoft IIS 5.0/5.1 by sending a malformed SEARCH request with an oversized buffer. It checks for IIS 5.0 and the presence of the SEARCH method before attempting the DoS.
Description
Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.
Exploits (2)
This exploit targets a denial-of-service vulnerability in Microsoft IIS 5.0/5.1 by sending a malformed SEARCH request with an oversized buffer. It checks for IIS 5.0 and the presence of the SEARCH method before attempting the DoS.
This exploit targets a denial-of-service vulnerability in Microsoft IIS via malformed WebDAV requests. It sends an excessively long 'SEARCH' request to crash the IIS service, causing a DoS condition.