CVE-2003-1566: Microsoft Internet Information Services

Medium severity, CVSS 5.0. EPSS: 28.1% chance of exploitation in the next 30 days.

Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.

Affected products

• Microsoft Internet Information Services: version 5.0 only

Published 2009-01-15. Last modified 2026-06-16.