PT-1999-1420 · Microsoft · Iis

Publicado 1999-08-11 · Atualizado 2018-10-12 · CVE-1999-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description The issue is related to a denial of service in IIS, which can be triggered by a flood of HTTP requests containing malformed headers.

Recommendations For IIS version 4.0, consider implementing rate limiting on HTTP requests to mitigate the risk of denial of service attacks. Additionally, restricting access to the server or implementing filtering rules to handle malformed headers may help minimize the impact of such attacks.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-1999-0867

Produtos afetados

Iis

Referências · 7

• 🔥 https://exploit-db.com/exploits/19457 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0867 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0867 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029 · Nota
• http://securityfocus.com/bid/579 · Nota
• http://ciac.org/ciac/bulletins/j-058.shtml · Nota
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349 · Nota