CVE-2000-0408

Microsoft Internet Information Server - Denial of Service

Title source: rule

Description

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Ussr Labs · textdoswindows

https://www.exploit-db.com/exploits/19907

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://www.microsoft.com/technet/support/kb.asp?ID=260205

[Various Sources] http://www.ussrback.com/labs40.html

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/1190

Scores

EPSS 0.7402

EPSS Percentile 98.8%

Details

Status published

Products (2)

microsoft/internet_information_server 4.0

microsoft/internet_information_services 5.0

Published May 11, 2000

Tracked Since Feb 18, 2026