CVE-1999-0867

CVE-1999-0867 describes a denial of service affecting IIS 4.0 caused by a flood of HTTP requests with malformed headers. The available connected documents corroborate a remote DoS scenario, originating from malformed header handling in IIS 4.0. The core vulnerability is the server’s inability to ...

CVE-1999-0725

The affected product is Microsoft IIS. When IIS runs with a default language set to Chinese, Korean, or Japanese, a remote attacker can view the source code of certain files (described as the Double Byte Code Page issue). The Red Hat entry and other mirrors confirm the same behavior. The root c...

CVE-1999-0867

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers...

CVE-1999-0725: Undefined Security Weakness

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page"...

CVE-1999-0861: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext...

CVE-1999-0867: Improper Input Validation

Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers...

CVE-1999-0777: Undefined Security Weakness

IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions...

CVE-1999-0154

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . dot to the end of the URL...

CVE-1999-1148

FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via many passive PASV connections at the same time...

CVE-1999-1451

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files...

CVE-1999-1223

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / forward slash characters...

CVE-1999-1035

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service hang via a malformed GET request, aka the IIS "GET" vulnerability...

CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

PT-1999-1008 · Microsoft · Iis

Name of the Vulnerable Software and Affected Versions: IIS versions 2.0 through 3.0 Description: The issue allows remote attackers to read the source code for ASP pages by appending a . dot to the end of the URL. Recommendations: For IIS versions 2.0 through 3.0, consider restricting access to AS...

CVE-2000-0024

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...

CVE-2000-0025

IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability...

CVE-1999-0349

CVE-1999-0349 is a vulnerability in Microsoft IIS FTP Server where a buffer overflow in the FTP LIST (ls) / NLST handling allows remote attackers to cause a denial of service, and in some cases may execute arbitrary commands. The issue is tied to the IIS FTP service’s command processing and memor...

CVE-1999-0412

CVE-1999-0412 affects IIS and other web servers where the server runs as SYSTEM and loads an ISAPI extension. The underlying issue allows an attacker to execute commands with SYSTEM privileges via the ISAPI extension, enabling high-privilege access on the affected server. Connected documents corr...

CVE-1999-0349

A buffer overflow in the FTP list ls command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands...

CVE-1999-0348

CVE-1999-0348 concerns IIS ASP caching where two virtual servers sharing the same physical directory may cause exposure of sensitive information. Affected software: Microsoft Internet Information Services (IIS) with ASP caching behavior. Root cause details are not fully provided in the connected ...