CVE-2002-1908

CVE-2002-1908 describes a denial-of-service vulnerability in Microsoft IIS 5.0 and 5.1, where a remote attacker can exhaust CPU resources by sending an HTTP request with an excessively long Host header containing many forward slashes. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it is network-exploitable with low attack complexity and no authentication required, leading to a partial availability impact. While no public exploit code or active exploitation is noted, and community discussion is minimal, its EPSS score suggests it's more likely to be exploited than a small percentage of other CVEs.