CVE-2003-1566: microsoft internet_information_services Configuration

EPSS trend

Probability

28.12%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 28.12% on 18-09-2026

18-09-202618-10-2026

EPSS score

28.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (aqtronix.com)
Maturity: unknown

Show all 4 exploits

exploit-databaseremotewindowsVerified
Microsoft IIS 5.0 - Failure To Log Undocumented TRACK Requests
Maturity: weaponized

References

5 links

archives.neohapsis.com/archives/ntbugtraq/2003-q4/0321.htmlMailing ListX Refsource NTBUGTRAQExploit
www.osvdb.org/4864VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/14077VDB EntryX Refsource XF
www.securityfocus.com/bid/9313VDB EntryX Refsource BIDExploit
www.aqtronix.com/Advisories/AQ-2003-02.txtX Refsource MISCExploit

Related vulnerabilities

CVE-2003-1567microsoftinternet_information_services25.25%17y ago15-01-2009 00:00The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.CVE-2003-0224microsoftinternet_information_services18.27%23y ago30-05-2003 04:00Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."CVE-2003-0226microsoftinternet_information_services43.20%23y ago30-05-2003 04:00Microsoft Internet Information Services (IIS) 5.0 and 5.1 allows remote attackers to cause a denial of service via a long WebDAV request with a (1) PROPFIND or (2) SEARCH method, which generates an error condition that is not properly handled.CVE-2003-0225microsoftinternet_information_server+138.46%23y ago30-05-2003 04:00The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.CVE-2003-0223microsoftinternet_information_server+117.32%23y ago30-05-2003 04:00Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.CVE-2003-0718microsoftinternet_information_server+187.91%22y ago16-10-2004 04:00The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.

All vulnerabilities ininternet_information_services

CVE-2003-1566: microsoft internet_information_services Configuration

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References