Information
Vulnerability Key: V0013718
IA Controls: ECSC-1 Security Configuration Compliance
Categories: 2.2 Least Privilege
Severity: Category II
Ref: WEB SERVER SECURITY TECHNICAL IMPLEMENTATION GUIDE Section 2.1
On IIS 6.0 the HTTP.SYS component of the service is used to set size limits on URL requests. UrlSegmentMaxLength sets the
maximum number of characters in a URL path segment (the area between the slashes in the URL). Setting this value too large may cause
performance or a denial of service condition on the web server.