AQTRONIX Security Advisory AQ-2003-02 – When an HTTP request with the verb TRACK under Microsoft IIS 5.0 is performed, the transaction is not logged. This can lead to the server being utilized for XST attacks along with other tactics for information gathering. Microsoft silently fixed this bug in IIS 6.0.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32456/AQ-2003-02.txt
Source: https://packetstormsecurity.com/files/32456/AQTRONIX-Security-Advisory-AQ-2003-02.html