CVE-2010-1899

This exploit targets a stack exhaustion vulnerability in Microsoft IIS 6.0 by sending a POST request with over 40,000 parameters, causing the IIS worker process to crash and leading to a denial of service (DoS). The PoC is written in Perl and demonstrates the attack by repeatedly sending malformed requests to an ASP page.

This Metasploit module exploits a stack exhaustion vulnerability in Microsoft IIS 6.0 by sending a large POST request with a repeated parameter, causing the server to become unresponsive. The exploit targets the handling of ASP scripts reading POST form values.