CVE-2000-0226

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02272.1The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to CVE-2000-02285.0Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the CVE-2000-02297.2gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-ro CVE-2000-02307.2Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.CVE-2000-02317.2Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.CVE-2000-02322.1Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP prin CVE-2000-023310.0SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.CVE-2000-02345.0The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htacc CVE-2000-02357.2Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.CVE-2000-02365.0Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such a CVE-2000-02376.4Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publ CVE-2000-02385.0Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via