CVE-1999-0229
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Summary
CVE-1999-0229 is a denial-of-service vulnerability affecting Microsoft Internet Information Services (IIS) servers running on Windows NT. Maliciously crafted requests to the server using specific directory pathnotations, such as ..\.., can cause the server to crash, leading to a denial-of-service condition. An attacker could exploit this vulnerability by sending such requests to the IIS server, resulting in a disruption of services and potential downtime. This issue was first identified in 1999 and has since been addressed through updates and patches. However, unpatched systems remain vulnerable to this type of attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft