PT-2000-1286 · Microsoft · Iis

Published 2000-05-10 · Updated 2018-10-30 · CVE-2000-0304

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft IIS versions 4.0 through 5.0

Description The issue allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program. This occurs when the IISADMPWD virtual directory is installed.

Recommendations For Microsoft IIS versions 4.0 through 5.0, consider removing or restricting access to the IISADMPWD virtual directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0304

Affected Products

Iis

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0304 · Security Note
• http://xforce.iss.net/alerts/advise52.php3 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0304 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031 · Note
• http://securityfocus.com/bid/1191 · Note