Lucene search

MitreCVE-2000-0408

HistoryJul 12, 2000 - 4:00 a.m.

CVE-2000-0408

2000-07-1204:00:00

mitre

web.nvd.nist.gov

iis 4.05

iis 5.0

remote attack

denial of service

malformed extension

url vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.758

Percentile

98.2%

JSON

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the “Malformed Extension Data in URL” vulnerability.

Affected configurations

Nvd

Node

microsoftinternet_information_serverMatch4.0

microsoftinternet_information_servicesMatch5.0

VendorProductVersionCPE
microsoftinternet_information_server4.0cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
microsoftinternet_information_services5.0cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	internet_information_server	4.0	cpe:2.3:a:microsoft:internet_information_server:4.0:::::::*
microsoft	internet_information_services	5.0	cpe:2.3:a:microsoft:internet_information_services:5.0:::::::*

References

www.microsoft.com/technet/support/kb.asp?ID=260205

www.securityfocus.com/bid/1190

www.ussrback.com/labs40.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.758

Percentile

98.2%

JSON

Related for CVE-2000-0408