CVE-2002-1908

medium · 5

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.

CVSS

13.7%

EPSS (exploit prob.)

96th

EPSS percentile

2002-12-31

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
microsoft	internet_information_services	5.0

Check a specific version with /api/v1/cve/match.

References

http://www.iss.net/security_center/static/10370.php
http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html
http://www.securityfocus.com/bid/5907
http://www.iss.net/security_center/static/10370.php
http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html
http://www.securityfocus.com/bid/5907

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-1908