Lucene search
+L

CVE-2000-0649

🗓️ 03 Aug 2000 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 461 Views🌐 WEB

IIS 4.0 vulnerability allows remote attackers to find server's internal IP via HTTP 1.0 request

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2000-0649
29 May 201815:50
circl
cvelist
Cvelist
CVE-2000-0649
3 Aug 200004:00
cvelist
exploitdb
Exploit DB
Microsoft IIS 2.0/3.0/4.0/5.0/5.1 - Internal IP Address Disclosure
13 Jul 200000:00
exploitdb
nessus
Tenable Nessus
Web Server HTTP Header Internal IP Disclosure
14 Sep 200100:00
nessus
kitploit
Kitploit
PoC-CVE-2000-0649
28 Aug 202606:58
kitploit
kitploit
Kitploit
CVE-2000-0649
30 Aug 202613:41
kitploit
kitploit
Kitploit
cve-2000-0649
27 Aug 202623:55
kitploit
metasploit
Metasploit
Microsoft IIS HTTP Internal IP Disclosure
20 Feb 201204:44
metasploit
nvd
NVD
CVE-2000-0649
13 Jul 200004:00
nvd
openvas
OpenVAS
Private IP address leaked in HTTP headers
3 Nov 200500:00
openvas
Rows per page
ParameterPositionPathDescriptionCWE
Authorizationpath/directoryDisclosure of internal IP address via HTTP 1.0 basic authentication without a realm when accessing a protected resource; server leaks internal IP in error response.CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 21:52Current
6.9Medium risk
Vulners AI Score6.9
CVSS 22.6
EPSS0.76558
461