Internet Information Services 5.0 Denial of service

Internet Information Services 5.0 Denial of service Release Date May 29th, 2003 Severity: High Systems Affected Microsoft Information Server 5.0 Microsoft Information Server 5.1 Description If an attacker sends a Webdav request with a body over 49,153 bytes using the 'PROPFIND' or 'SEARCH' reques...

iisDoS.txt

Internet Information Services 5.0 Denial of service Release Date May 29th, 2003 Severity: High Systems Affected Microsoft Information Server 5.0 Microsoft Information Server 5.1 Description If an attacker sends a Webdav request with a body over 49,153 bytes using the 'PROPFIND' or 'SEARCH' reques...

Multiple intrusion detection systems may be circumvented via %u encoding

Overview Multiple intrusion detection systems may be circumvented via %u encoding allowing intruders to launch attacks undetected. Description Most intrusion detection systems are capable of decoding URLs that are encoded using either the "UTF" or "hex-encode" encoding schemes. Microsoft's...