PT-1999-1589 · Microsoft · Iis

Publicado 1999-12-31 · Atualizado 2018-10-12 · CVE-1999-1148

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IIS versions 4.0 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing many passive connections at the same time.

Recommendations For IIS versions 4.0 and earlier, consider restricting the number of simultaneous passive connections to prevent resource exhaustion until a fix is available.

Correção

Identificadores relacionados

CVE-1999-1148

Produtos afetados

Iis

Referências · 5

• http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1148 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1148 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1215 · Nota