Securells CVE-2001-0524 Remote Security Vulnerability

Securells is prone to a remote security vulnerability. eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.


 

Privacy Statement
Copyright 2010, SecurityFocus