critical10.0Public exploit code
CVE-1999-0874
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0 - Remote Buffer Overflow (4)1999-06-15 · remote · windows · Verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (3)1999-06-15 · remote · linux · Verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (2)1999-06-15 · remote · windows · Verified
- Microsoft IIS 4.0 - Remote Buffer Overflow (1)1999-06-15 · remote · windows · Verified
- Microsoft IIS 4.0 - '.htr' Path Overflow (MS02-018) (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Nt | All versions Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905
- http://www.ciac.org/ciac/bulletins/j-048.shtml
- http://www.eeye.com/html/Research/Advisories/AD06081999.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905
- http://www.ciac.org/ciac/bulletins/j-048.shtml
- http://www.eeye.com/html/Research/Advisories/AD06081999.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915