Q238349Vendor advisory
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349 CVE-1999-0867
Microsoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of Service
Record summary
CVE-1999-0867 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of ServiceExploitDB exploitby Nobuo MiwaNot analyzed1 file
References
6support.microsoft.com
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q238349 J-058Third-party advisoryGovernment resource
http://www.ciac.org/ciac/bulletins/j-058.shtml 579vdb entry
http://www.securityfocus.com/bid/579 MS99-029Vendor advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-1999-0867