CVE-2000-0226

IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."...

CVE-2000-0226

The CVE-2000-0226 entry maps to a concrete IIS 4.0 vulnerability: the chunked-encoding transfer mechanism does not cap the buffer size, allowing a malicious POST/PUT request to reserve a huge amount of memory and potentially exhaust server resources. This is described as a denial of service risk ...