PT-1999-1132 · Microsoft · Iis

Published 1999-01-26 · Updated 2008-09-09 · CVE-1999-0449

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IIS 4

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by making a direct request to certain scripts. The affected scripts include advsearch.asp, query.asp, and search.asp.

Recommendations For IIS 4, consider restricting access to the advsearch.asp, query.asp, and search.asp scripts as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-0449

Affected Products

Iis

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-0449 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0449 · Note
• http://osvdb.org/3 · Note
• http://osvdb.org/4 · Note
• http://osvdb.org/2 · Note
• http://securityfocus.com/bid/193 · Note