CVE Catalog
CVE-2000-0226
MediumExploitation Probability (EPSS)
Very high risk6.81%
93th percentile - higher than 93% of all known CVEs
Summary
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command, leading to memory exhaustion.
Risk Assessment
An attack that can lead to denial of service may affect the availability of applications and server resources, potentially resulting in downtime for the organization.
Recommendation
It is recommended to upgrade to a newer version of IIS or implement appropriate security measures to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."