CVE

Id
23444  
CVE No.
CVE-2007-0087  
Status
Candidate  
Description
** DISPUTED ** Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.  
Phase
Assigned (20070105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
226728 23444 CVE-2007-0087 BUGTRAQ:20070103 a cheesy Apache / IIS DoS vuln (+a question)  View
226729 23444 CVE-2007-0087 URL:http://www.securityfocus.com/archive/1/archive/1/455833/100/0/threaded  View
226730 23444 CVE-2007-0087 BUGTRAQ:20070104 Re: a cheesy Apache / IIS DoS vuln (+a question)  View
226731 23444 CVE-2007-0087 URL:http://www.securityfocus.com/archive/1/455879/100/0/threaded  View
226732 23444 CVE-2007-0087 BUGTRAQ:20070104 Re: a cheesy Apache / IIS DoS vuln (+a question)  View
226733 23444 CVE-2007-0087 URL:http://www.securityfocus.com/archive/1/455920/100/0/threaded  View
226734 23444 CVE-2007-0087 BUGTRAQ:20070104 Re: a cheesy Apache / IIS DoS vuln (+a question)  View
226735 23444 CVE-2007-0087 URL:http://www.securityfocus.com/archive/1/455882/100/0/threaded  View
226736 23444 CVE-2007-0087 OSVDB:33457  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54481 JVNDB-2007-003173 jgbbs におけるパスワードを含むデータベースをダウンロードされる脆弱性 jgbbs は、不十分なアクセスコントロールを伴う Web ルート配下に重要な情報を格納するため、パスワードを含むデータベースをダウンロードされる脆弱性が存在します。 CVE-2007-0089 23444 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003173.html  View