cve.bz

CVE-2001-0524

no score yetEPSS 1.8%

eeye digital security securells: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.

eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.
EPSS
1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON