Description
The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.
Remediation
References
Related Vulnerabilities
SharePoint Improper Input Validation Vulnerability (CVE-2019-0957)
WordPress Plugin WPML (WordPress Multilingual) Multiple Vulnerabilities (3.1.8.6)
MySQL CVE-2022-21332 Vulnerability (CVE-2022-21332)
Oracle Database Server CVE-2015-4921 Vulnerability (CVE-2015-4921)
Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)