CVE-2003-0226

CVE-2003-0226 describes a denial-of-service vulnerability affecting Microsoft Internet Information Services (IIS) versions 5.0 and 5.1. Remote attackers can exploit this by sending a malformed, long WebDAV request using either the PROPFIND or SEARCH methods, causing the server to crash due to improper error handling. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial denial of service. The EPSS score is notably high at 0.626, suggesting a higher likelihood of exploitation compared to most CVEs. While not listed on the KEV catalog or Hot List, exploit code is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness and potential for exploitation. There is no evidence of active exploitation in the wild.