Lucene search

[email protected]CVE-1999-0867

HistoryJan 04, 2000 - 5:00 a.m.

CVE-1999-0867

2000-01-0405:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-1999-0867

denial of service

iis 4.0

http

malformed headers

nvd

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.4%

JSON

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.

Affected configurations

NVD

Node

microsoftcommercial_internet_systemMatch2.0

microsoftcommercial_internet_systemMatch2.5

microsoftinternet_information_serverMatch4.0

microsoftsite_serverMatch3.0unknowncommerce

CPENameOperatorVersion
microsoft:commercial_internet_systemmicrosoft commercial internet systemeq2.0
microsoft:commercial_internet_systemmicrosoft commercial internet systemeq2.5
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:site_servermicrosoft site servereq3.0

CPE	Name	Operator	Version
microsoft:commercial_internet_system	microsoft commercial internet system	eq	2.0
microsoft:commercial_internet_system	microsoft commercial internet system	eq	2.5
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:site_server	microsoft site server	eq	3.0

References

support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349

www.ciac.org/ciac/bulletins/j-058.shtml

www.securityfocus.com/bid/579

docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.4%

JSON

Related for CVE-1999-0867

cvelist1 nessus1 nvd1