5
CVE-1999-0867
- EPSS 21.53%
- Veröffentlicht 11.08.1999 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:49:13
- Erkennungen
LoginDenial of service in IIS 4.0 via a flood of HTTP requests with malformed headers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Commercial Internet System Version 2.0
Microsoft ≫ Commercial Internet System Version 2.5
Microsoft ≫ Internet Information Server Version 4.0
Microsoft ≫ Site Server Version 3.0 Update unknown Edition commerce
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 21.53% | 0.973 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349
http://www.ciac.org/ciac/bulletins/j-058.shtml
http://www.securityfocus.com/bid/579
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029