CVE-2005-2089
Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 31.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes IIS to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 30.97% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-444
- Affected
- microsoft/internet information services
- Source
- cve@mitre.org
References
- http://seclists.org/lists/bugtraq/2005/Jun/0025.htmlMailing List, Third Party Advisory
- http://www.securiteam.com/securityreviews/5GP0220G0U.htmlBroken Link
- http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdfBroken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42899Third Party Advisory, VDB Entry
- http://seclists.org/lists/bugtraq/2005/Jun/0025.htmlMailing List, Third Party Advisory
- http://www.securiteam.com/securityreviews/5GP0220G0U.htmlBroken Link
- http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdfBroken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42899Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.