CVE-2003-1567

The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the original request content in the response body. This allows remote attackers to read HTTP headers, potentially leading to the theft of cookies and authentication credentials , or the bypass of the HttpOn...