CVE-2007-0087
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal
** IMPUGNADO ** Microsoft Internet Information Services (IIS), cuando es accedido a través de una conexión TCP con un tamaño de ventana, permite a un atacante remoto provocar provocar denegación de servicio (consumo de ancho de banda de la red) a través de la cabecera Range que especifica múltiples copias de un mismo fragmento. NOTA: La severidad de este asunto ha sido impugnado por terceras partes, quienes plantean que el tamaño de ventana requerido para el ataque no está normalmente soportado o configurado por el servidor, o que un ataque DDos lograría la misma meta.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-01-05 CVE Reserved
- 2007-01-05 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://osvdb.org/33457 | Vdb Entry | |
http://www.securityfocus.com/archive/1/455833/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455879/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455882/100/0/threaded | Mailing List | |
http://www.securityfocus.com/archive/1/455920/100/0/threaded | Mailing List |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Microsoft Search vendor "Microsoft" | Internet Information Server Search vendor "Microsoft" for product "Internet Information Server" | * | - |
Affected
|