CVE-1999-0867

CVSS 2.0 Score 5.0 of 10 (medium)

Details

Published Aug 11, 1999
Updated: Nov 20, 2024
CWE ID 20

Summary

CVE-1999-0867 is a denial-of-service vulnerability affecting Internet Information Services (IIS) version 4.0. An attacker can exploit this weakness by sending a flood of HTTP requests with malformed headers, causing IIS to become unresponsive and denying service to legitimate users. This issue poses a significant risk to websites using IIS 4.0, potentially leading to extended downtime and loss of productivity. System administrators are urged to apply available patches or upgrades to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share