PT-1999-1132 · Microsoft · Iis

Publicado 1999-01-26 · Atualizado 2008-09-09 · CVE-1999-0449

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IIS 4

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by making a direct request to certain scripts. The affected scripts include advsearch.asp, query.asp, and search.asp.

Recommendations For IIS 4, consider restricting access to the advsearch.asp, query.asp, and search.asp scripts as a temporary workaround to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-0449

Produtos afetados

Iis

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0449 · Nota
• http://osvdb.org/3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0449 · Nota de Segurança
• http://osvdb.org/4 · Nota
• http://osvdb.org/2 · Nota
• http://securityfocus.com/bid/193 · Nota