An administrative script from IIS 3.0 later included in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by accessing the script without a particular argument aka the \Absent Directory Browser Argument\ vulnerability.