CVE-2000-1147

CVE-2000-1147 describes a buffer overflow in the IIS ISAPI .ASP parsing mechanism, enabling attackers to execute arbitrary commands by sending a long string in the LANGUAGE argument of a script tag. The vulnerability is categorized with a MEDIUM base score (CVSS v2.0: AV:L/AC:L/Au:N/C:P/I:P/A:P) ...

CVE-1999-0448

The CVE-1999-0448 issue affects IIS 4.0 and Apache by allowing remote control over log HTTP request methods so that the actual requested URL can be hidden. Root cause is how the log records capture the method, potentially truncating or misrepresenting the request, enabling a malicious user to con...

CVE-1999-1233

Product/affected component: IIS 4.0. Vulnerability description: The “Domain Resolution” issue occurs because access is not properly restricted for the initial session request from an IP address that does not resolve to a DNS domain. Root cause (as stated): Improper restriction of initial session ...

CVE-2003-0225

Affected software: Microsoft IIS 4.0 and 5.0. Vulnerable component: ASP Response.AddHeader handling, which fails to cap memory usage when constructing headers. Impact: remote attackers can craft an ASP page to generate a large header, causing memory exhaustion and denial of service. Root cause (p...

CVE-1999-1478

The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...

CVE-1999-1035

The provided records identify CVE-1999-1035 as a vulnerability in Microsoft IIS 3.0 and 4.0 running on x86 and Alpha, where remote attackers can cause a denial of service (hang) by sending a malformed GET request. Root cause details are not elaborated beyond mentioning a malformed GET handling is...

CVE-1999-1544

The CVE-1999-1544 entry describes a buffer overflow in the FTP server of Microsoft IIS 3.0/4.0 that can be triggered by a long NLST (ls) command, leading to a denial of service. Affected component: IIS FTP server; root cause: improper handling of long NLST input. Impact: local and, in some cases,...