PT-1999-1589 · Microsoft · Iis

Published 1999-12-31 · Updated 2018-10-12 · CVE-1999-1148

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IIS versions 4.0 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing many passive connections at the same time.

Recommendations For IIS versions 4.0 and earlier, consider restricting the number of simultaneous passive connections to prevent resource exhaustion until a fix is available.

Fix

Related Identifiers

CVE-1999-1148

Affected Products

Iis

References · 5

• http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1148 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-1148 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1215 · Note