PT-1999-1420 · Microsoft · Iis

Published 1999-08-11 · Updated 2018-10-12 · CVE-1999-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IIS version 4.0

Description The issue is related to a denial of service in IIS, which can be triggered by a flood of HTTP requests containing malformed headers.

Recommendations For IIS version 4.0, consider implementing rate limiting on HTTP requests to mitigate the risk of denial of service attacks. Additionally, restricting access to the server or implementing filtering rules to handle malformed headers may help minimize the impact of such attacks.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-1999-0867

Affected Products

Iis

References · 7

• 🔥 https://exploit-db.com/exploits/19457 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0867 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0867 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029 · Note
• http://securityfocus.com/bid/579 · Note
• http://ciac.org/ciac/bulletins/j-058.shtml · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349 · Note