CVE-2001-0524: Eeye Digital Security Securells

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.

Affected products

• Eeye Digital Security Securells: up to and including 1.0.3

Published 2001-08-14. Last modified 2026-06-16.