medium5.0Public exploit code
CVE-2000-0408
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service2000-05-11 · dos · windows · Verified
Impact
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | Version 4.0 |
| Microsoft | Internet Information Services | Version 5.0 |
References
- NVD record
- CVE.org record
- http://www.microsoft.com/technet/support/kb.asp?ID=260205
- http://www.securityfocus.com/bid/1190
- http://www.ussrback.com/labs40.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030
- http://www.microsoft.com/technet/support/kb.asp?ID=260205
- http://www.securityfocus.com/bid/1190
- http://www.ussrback.com/labs40.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030