CVE-1999-1035

Internet Information Server 3.0 and 4.0 - Denial of Service via Malformed GET Request

Title source: llm
STIX 2.1

Description

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" vulnerability.

References (3)

Core 3
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_mskb
http://support.microsoft.com/support/kb/articles/q192/2/96.asp
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/1823

Scores

EPSS 0.1748
EPSS Percentile 96.8%

Details

Status published
Products (2)
microsoft/internet_information_server 3.0
microsoft/internet_information_server 4.0
Published Dec 31, 1999
Tracked Since Feb 18, 2026